Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
HeretoLearn23
New Contributor

FortiAnalyzer Datasets to Query a specific Users Browsing sessions

Hello, I have been tasked with getting specific users browsing sessions. I have created the following dataset, that does work.

But now I am being asked to to also include browsing-time per session. and if possible to exclude all internal traffic.

 

Is this possible? And help is greatly appreciated. 

FortiAnalyzer Version v7.2.3

Dataset below. 

 

Log Type: Web Filter 

SELECT
from_itime(itime) AS itime,
`user` AS USER,
`catdesc` AS Category,
`url` AS URL
FROM
$log
WHERE
$filter
AND (((lower(`user`) = lower('First.Last'))))

1 Solution
gibson40
New Contributor

Make sure the logs for the report exist first. You can check each chart in the report and find the datasets used for each report. If you open the dataset, you can run a test query and make sure you're getting the data you expect to see. I'd probably start there - there's a pretty good chance that the root cause will reveal itself.

View solution in original post

https://19216801.onl/ https://routerlogin.uno/
1 REPLY 1
gibson40
New Contributor

Make sure the logs for the report exist first. You can check each chart in the report and find the datasets used for each report. If you open the dataset, you can run a test query and make sure you're getting the data you expect to see. I'd probably start there - there's a pretty good chance that the root cause will reveal itself.

https://19216801.onl/ https://routerlogin.uno/
Top Kudoed Authors