Combine Tables In Datasets

[adiday]

Dear All,

I have custom datasets to calculate total bandwidth from SSL VPN users, the data is from Log Type Traffic :

SELECT
srcip,
dstip,
user,
service,
sum(COALESCE(sentbyte, 0) + COALESCE(rcvdbyte, 0)) AS bandwidth,
sum(COALESCE(rcvdbyte, 0)) AS traffic_in,
sum(COALESCE(sentbyte, 0)) AS traffic_out
FROM
$log
WHERE
$filter
AND (logflag & 1 > 0)
AND(((lower(srcintf) = lower('ssl.TRUST_VDOM'))))
GROUP BY
srcip,
dstip,
user,
service
HAVING
sum(COALESCE(sentbyte, 0) + COALESCE(rcvdbyte, 0)) > 0
ORDER BY
bandwidth DESC

And now we require to know the duration of connection for each SSL VPN users, related with previous datasets. But I can't find any documentation yet. Is that possible to do?

[Anthony_E]

Hello adiday,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[vraev]

Hi@adiday,

Please review these articles:

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-create-a-VPN-report-for-users-c...
https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-monitor-the-remote-VPN-users-wo...