Skip to main content
Keta1969
New Member
January 4, 2017
Question

Help Customizing a dataset

  • January 4, 2017
  • 2 replies
  • 2815 views

Hi,

 

Using the web-Detailed-Website-Browsing-Log filter I can look for devices accessing Pornographic sites. However it does not list the source device's IP so I can only see it is happening.

 

Can somebody please amend the code so I can added it to the report.

 

Regards

 

Keith

    2 replies

    hzhao_FTNT
    Staff
    Staff
    January 4, 2017

    Hi, you can just add srcip into dataset:

    select from_dtime(dtime) as timestamp, srcip, catdesc, hostname as website, status, sum(bandwidth) as bandwidth from ###(select dtime, srcip, catdesc, hostname, cast(utmaction as text) as status, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log-traffic where $filter and hostname is not null and logid_to_int(logid) not in (4, 7, 14) and (countweb>0 or ((logver is null or logver<52) and (hostname is not null or utmevent in ('webfilter', 'banned-word', 'web-content', 'command-block', 'script-filter')))) group by dtime, srcip, catdesc, hostname, utmaction order by dtime desc)### t group by dtime, srcip, catdesc, website, status order by dtime desc

     

    regards,

    hz

    Keta1969
    Keta1969Author
    New Member
    January 6, 2017

    Hi hz,

     

    Thank you very much for your help. It was a great help. I know have the report I needed.

     

    Regards

    Keith

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!