Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
trubble
New Contributor

Estimated Browsing Time

Any report guru's out there tell me how to get the "Estimated Browsing Time" to display by hour or by day rather than for the entire reporting period? 

1 Solution
hzhao_FTNT
Staff
Staff

There is no predefined chart/dataset for Estimated Browsing Time by hr or by day. You have to create a custom dataset. For example, Estimated Browsing Time by day per user can be written as:

select dom, user_src, sum(browsetime) as browsetime from ###(select $DAY_OF_MONTH as dom, coalesce(nullifna(`user`), nullifna(`unauthuser`), ipstr(`srcip`)) as user_src, sum($browse_time) as browsetime from $log where $filter and logid_to_int(logid) not in (4, 7, 14) group by dom, user_src having sum($browse_time)>0)### t group by dom, user_src order by browsetime desc

View solution in original post

5 REPLIES 5
hzhao_FTNT
Staff
Staff

There is no predefined chart/dataset for Estimated Browsing Time by hr or by day. You have to create a custom dataset. For example, Estimated Browsing Time by day per user can be written as:

select dom, user_src, sum(browsetime) as browsetime from ###(select $DAY_OF_MONTH as dom, coalesce(nullifna(`user`), nullifna(`unauthuser`), ipstr(`srcip`)) as user_src, sum($browse_time) as browsetime from $log where $filter and logid_to_int(logid) not in (4, 7, 14) group by dom, user_src having sum($browse_time)>0)### t group by dom, user_src order by browsetime desc

trubble
New Contributor

I'm having trouble with the query.  Bear with me as I am not a sql guy.

 

Running a test on this query in the dataset, I am getting the following error:

 

ERROR:  column "ebtime" does not exist
LINE 1: ...user"), ipstr("srcip")) as user_src, sum(coalesce(ebtime, 0).
hzhao_FTNT

What's your FAZ version? Did you set log type to traffic?

trubble
New Contributor

I tried both traffic and web filter.  v5.2.1-build0662

 

 

 

 

trubble
New Contributor

Nevermind!  Not sure what I did differently but after relogging it's working like a charm.  Thanks for your help!

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors