Skip to main content
NMBDave
NMBDave
New Member
August 31, 2016
Solved

Getting detailed URL info with Fortianalyzer

  • August 31, 2016
  • 1 reply
  • 11430 views

We are trying to get detailed information for where our users are going.  Say we have a user that goes to their facebook page and then to the company facebook page and then back to their own.  The detailed "User Detailed Browsing Log" only says they went to facebook.com.  Is there a way to see more details that might show if they are doing company business or personal?

    Best answer by hzhao_FTNT

    Make sure you can see webfilter logs in log view, then try:

    select from_dtime(dtime) as timestamp, catdesc, hostname || url as website, cast(action as text) as status from $log-webfilter where $filter and hostname is not null  group by dtime, catdesc, website, action order by dtime desc

    1 reply

    NMBDave
    NMBDaveAuthor
    New Member
    September 15, 2016

    So nobody has a way to get detailed info?

    emnoc
    emnoc
    New Member
    September 15, 2016

    Qs:

     

    What/Where is the company Facebook page located at? Do you have SSL decryption so you can track the URL request in the http headers

     

    hzhao_FTNT
    Staff
    hzhao_FTNTAnswer
    Staff
    September 15, 2016

    Make sure you can see webfilter logs in log view, then try:

    select from_dtime(dtime) as timestamp, catdesc, hostname || url as website, cast(action as text) as status from $log-webfilter where $filter and hostname is not null  group by dtime, catdesc, website, action order by dtime desc

    Terms & ConditionsAccessibility statement