Skip to main content
pcraponi
New Member
December 16, 2015
Question

Repeated count

Hi,

 

Anyone know how repeated log in FortiAnalyzer works?

 

For example, if I query a Youtube bandwidth usage using "where" filter as "hostname like '%googlevideo.com'"

It will return serveral results with different Application signatures. For example:

 

 

Like you can see, we have the same hostname for two different App's signature. These are different traffic and should be sum or are repeated traffic and I need just one? 

 

I have the same doubts for others cases, for example:

If an user using Google Chrome access Facebook website, on Log we will see signatures match to HTTP.BROWSER_Chrome AND Facebook. I can sum both sessions/bandwidth usage?

 

 

Regards,

Paulo Raponi

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT