Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
vachtang
New Contributor

Custom report filtered by web page. How to?

Hi,

 

I need to create custom report with template filter for web page.

Behavior similar like in "User Detailed browser" reports, but filtering nor by user, but by web page.

 

Report example:

 

www.webpage.com

User1      time1      Bandwidth1

User2      time2      Bandwidth2

User3      time3      Bandwidth3

User4      time4      Bandwidth4

 

How can I create this report?

is it possiible? :)

 

Thank you

2 Solutions
hzhao_FTNT
Staff
Staff

Hi there,

 

 

You need a custom dataset like: 

select hostname, user_src, sum(delta) as browsetime, sum(bandwidth) as bandwidth from ###(select hostname, coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src, sum($browse_time) as delta, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter group by hostname, user_src having sum($browse_time)>0 order by delta desc)### t group by hostname, user_src order by browsetime desc

The log type is traffic. Then you can create a custom chart based on this dataset, add this chart to a new report. Before report running, you have to add a hostname filter in advanced setting.

 

Regards,

hz

View solution in original post

hzhao_FTNT

Hi, it is not possible for user to create filter under configuration, this has to be hard-coded.

 

vachtang wrote:

Thank you, is it possible to create filter in report "Configuration" tab, like in "Detailed user report" reports?

 

 

View solution in original post

4 REPLIES 4
hzhao_FTNT
Staff
Staff

Hi there,

 

 

You need a custom dataset like: 

select hostname, user_src, sum(delta) as browsetime, sum(bandwidth) as bandwidth from ###(select hostname, coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src, sum($browse_time) as delta, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter group by hostname, user_src having sum($browse_time)>0 order by delta desc)### t group by hostname, user_src order by browsetime desc

The log type is traffic. Then you can create a custom chart based on this dataset, add this chart to a new report. Before report running, you have to add a hostname filter in advanced setting.

 

Regards,

hz

vachtang

Thank you, is it possible to create filter in report "Configuration" tab, like in "Detailed user report" reports?

 

 

hzhao_FTNT wrote:

Hi there,

 

 

You need a custom dataset like: 

select hostname, user_src, sum(delta) as browsetime, sum(bandwidth) as bandwidth from ###(select hostname, coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src, sum($browse_time) as delta, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter group by hostname, user_src having sum($browse_time)>0 order by delta desc)### t group by hostname, user_src order by browsetime desc

The log type is traffic. Then you can create a custom chart based on this dataset, add this chart to a new report. Before report running, you have to add a hostname filter in advanced setting.

 

Regards,

hz

hzhao_FTNT

Hi, it is not possible for user to create filter under configuration, this has to be hard-coded.

 

vachtang wrote:

Thank you, is it possible to create filter in report "Configuration" tab, like in "Detailed user report" reports?

 

 

JoseOrosco

hzhao_FTNT wrote:

Hi there,

 

 

You need a custom dataset like: 

select hostname, user_src, sum(delta) as browsetime, sum(bandwidth) as bandwidth from ###(select hostname, coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src, sum($browse_time) as delta, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter group by hostname, user_src having sum($browse_time)>0 order by delta desc)### t group by hostname, user_src order by browsetime desc

The log type is traffic. Then you can create a custom chart based on this dataset, add this chart to a new report. Before report running, you have to add a hostname filter in advanced setting.

 

Regards,

hz

Are the "###" necessary in the query?

Labels
Top Kudoed Authors