Skip to main content
Ian_Harrison
New Member
October 14, 2016
Question

Help required with report for specific URL

  • October 14, 2016
  • 1 reply
  • 4530 views

Hi

 

I need to create a report based on a specific URL (ie www.bbc.co.uk) and for the report to show time accessed, user ID etc.  I have had a look at the datasets but as my SQL skills are not to good not to sure where to start.

 

Can you point me in the right direction as to which dataset I should start with and any tips on the code to use.

 

Thanks for any help.

 

Ian

1 reply

hzhao_FTNT
Staff
Staff
October 14, 2016

Hi, you can create a custom chart based on below query, ass the chart into a report, under report settings, add a filter: hostname=www.bbc.co.uk 

 

select user_src, from_dtime(dtime) as timestamp, catdesc, hostname as website, status, sum(bandwidth) as bandwidth from ###(select coalesce(nullifna(`user`), nullifna(`unauthuser`), ipstr(`srcip`)) as user_src, dtime, catdesc, hostname, cast(utmaction as text) as status, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log-traffic where $filter and hostname is not null and logid_to_int(logid) not in (4, 7, 14) and ((logver>=52 and countweb>0) or ((logver is null) and utmevent in ('webfilter', 'banned-word', 'web-content', 'command-block', 'script-filter'))) group by user_src, dtime, catdesc, hostname, utmaction order by dtime desc)### t group by user_src, dtime, catdesc, website, status order by dtime desc

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!