Skip to main content
pcraponi
New Member
December 16, 2015
Question

Repeated count

  • December 16, 2015
  • 0 replies
  • 2265 views

Hi,

 

Anyone know how repeated log in FortiAnalyzer works?

 

For example, if I query a Youtube bandwidth usage using "where" filter as "hostname like '%googlevideo.com'"

It will return serveral results with different Application signatures. For example:

 

 

Like you can see, we have the same hostname for two different App's signature. These are different traffic and should be sum or are repeated traffic and I need just one? 

 

I have the same doubts for others cases, for example:

If an user using Google Chrome access Facebook website, on Log we will see signatures match to HTTP.BROWSER_Chrome AND Facebook. I can sum both sessions/bandwidth usage?

 

 

Regards,

Paulo Raponi

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!