Fortianalyzer 6.2 VPN user monitor report

[SONA]

Hello everyone

We are monitoring User vpn connections to our Fortigate Firewall (Using FAZ version 6.2.2). We currently using the steps of this kb: How to monitor the remote VPN users’ working hours (fortinet.com)

This generate a dataset with the following information:

User     First Login                    Duration

UserA   2021-01-15 8:00          10000

UserB   2021-01-15 8:05          12345

The first login is the first detected connection in the selected data range, if we generate this report daily we can get the time of day that users first connected and for how long. However our manager is asking to consolidate this report per day, that is, we need an output like this if we generate the data set for 2 days:

Date               User      First Login                    Duration

2021-01-15     UserA    2021-01-15 8:00          10000

2021-01-16     UserA    2021-01-16 8:01          10400

2021-01-15     UserB    2021-01-15 8:05          12345

2021-01-16     UserB    2021-01-16 8:02          10400

Do you have any ideas of how we can define the Dataset to generate this output?

Many thanks in advance

Regards,