Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

Adding a browsetime column - breach of 3 column rule ?

Hello, I am having trouble adding a browsetime colum to my report (I have attached a screenshot).

This is exactly what I want but I just don't know how to add a browsetime column. Can anyone please help ?

Or would that then be a breach of the maximum limit of 3 columns in a drilldown dataset ?


This is the code for the attached screenshot:

select user_src, app, ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) as browsetime from ###(select user_src, app, ebtr_agg_flat(browsetime) as browsetime from (select coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src, coalesce(nullifna(hostname), ipstr(`dstip`)) as app, ebtr_agg_flat($browse_time) as browsetime from $log where $filter and $browse_time is not null and (appcat = 'Social.Media') group by user_src, app) t group by user_src, app order by ebtr_value(ebtr_agg_flat(browsetime), null, null) desc)### t group by user_src, app order by browsetime desc