FortiAnalyzer Datasets to Query a specific Users Browsing sessions

[HeretoLearn23]

Hello, I have been tasked with getting specific users browsing sessions. I have created the following dataset, that does work.

But now I am being asked to to also include browsing-time per session. and if possible to exclude all internal traffic.

Is this possible? And help is greatly appreciated. 

FortiAnalyzer Version v7.2.3

Dataset below. 

Log Type: Web Filter 

SELECT
from_itime(itime) AS itime,
`user` AS USER,
`catdesc` AS Category,
`url` AS URL
FROM
$log
WHERE
$filter
AND (((lower(`user`) = lower('First.Last'))))

[gibson40 · Accepted solution]

Make sure the logs for the report exist first. You can check each chart in the report and find the datasets used for each report. If you open the dataset, you can run a test query and make sure you're getting the data you expect to see. I'd probably start there - there's a pretty good chance that the root cause will reveal itself.