Custom Report for Youtube Activity

[Bill_K]

I used to be able to run a report that provided the userID and file name of all the Youtube activity. With the recent upgrade to FortiGuard, it appears that this data is not being captured.  We used some code provided at "Al's Tech Corner" as shown below. Does anyone have a reason why this data is no longer captured or how to, again, capture/display this information?

       select app, appid, filename, `user`, srcip, sum(filesize) as filesize , from_dtime(dtime) as timestamp        from $log         where $filter and filesize is not null         and clouduser is not null         and filename is not null         and appid = '31077'         group by cloudaction, app, appid, `user`, srcip, filename, dtime         order by user asc

Thanks

[JulianoCarlos]

Hi!

We faced same problem here (using this dataset code from Al´s Tech Corner). We just opened a support ticket and the answer was that the problem was caused by some firmware update. After months of open support ticket, they send to us the following dataset (It is a App Control Dataset):

drop table if exists t1; drop table if exists t2;

create temporary table t1 as select app, appid, filename, filesize, sessionid from $log where appid = '38569';

create temporary table t2 as select `user`, sessionid, app from $log where appid = '31077';

select t2.user, t1.filename, t1.filesize from t1 inner join t2 on t2.sessionid = t1.sessionid where t1.filename is not null and t1.filesize is not null

group by t2.user, t1.filename, t1.filesize order by t1.filesize desc

Hope this helps. :)

Juliano