DescriptionThis article provides a possible solution for the scenario where there are Identity-based policies but the user or username cannot be seen on the forward traffic log.
ScopeFirmware v5.2, v5.4
SolutionOpen ssh session and execute the following:
# config log setting
# set brief-traffic-format disable
# end
If a virtual vdom is enabled, this option should be configured on each vdom:
# conf vdom
# edit "vdom-name"
# config log setting
# set brief-traffic-format disable
# end
# end