FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
btan
Staff & Editor
Staff & Editor
Article Id 406768
Description This article describes the 'User' field under FortiAnalyzer -> Log View -> FortiClient.
Scope FortiAnalyzer 7.0 and above.
Solution

End user network traffic is displayed under FortiAnalyzer -> Log View -> FortiClient.

 

aug-kb2-user1.png

 

Note that the username displayed here is the device username: it is not the SSL VPN/IPsec VPN username.

It will display the current logged-in Windows user, which should exist in the C:\Users directory.

 

aug-kb2-2.png

Contributors