No matching log data for this report

[warrenstow]

I've created a custom report to show user bandwidth by date but it always returns 'No matching log data for this report'

I created the data set and when I run it I see the expected results.

I then created the chart and if I test for real data I see the expected results.

Finally I added my chart to a report and run it without any device filtering.  No data, I've tried:

For past 1,2 7 and 30 days.

Any help is appreciated:

This is my query (based on Log Type - Event):
select
myUser
,myDate
--,min(s_time) as s_time
--,max(e_time) as e_time
,(case when min(s_time)=max(e_time) then max(max_traffic_in)+max(max_traffic_out)
else max(max_traffic_in)-min(min_traffic_in)+max(max_traffic_out)-min(min_traffic_out) end) as bandwidth
,(case when min(s_time)=max(e_time) then max(max_traffic_in)
else max(max_traffic_in)-min(min_traffic_in) end) as traffic_in
,(case when min(s_time)=max(e_time) then max(max_traffic_out)
else max(max_traffic_out)-min(min_traffic_out) end) as traffic_out
from ###(
select
coalesce(nullifna(`user`), ipstr(`remip`)) as myUser
,from_itime(dtime)::date as myDate
--,max(coalesce(duration,0)) as max_duration
--,min(coalesce(duration,0)) as min_duration
,min(coalesce(dtime, 0)) as s_time
,max(coalesce(dtime, 0)) as e_time
,min(coalesce(sentbyte, 0)) as min_traffic_out
,min(coalesce(rcvdbyte, 0)) as min_traffic_in
,max(coalesce(sentbyte, 0)) as max_traffic_out
,max(coalesce(rcvdbyte, 0)) as max_traffic_in
,max(coalesce(rcvdbyte, 0)+coalesce(sentbyte, 0)) as max_traffic
from $log
where $filter
and subtype='vpn'
and tunneltype = 'ssl-tunnel'
and action in ('tunnel-stats', 'tunnel-down', 'tunnel-up')
and coalesce(nullifna(`user`), ipstr(`remip`)) is not null
and tunnelid is not null
and dtime is not null
group by myUser, myDate)### t
group by myUser, myDate
order by myUser

[warrenstow · Accepted solution]

I removed my comments from my query and now the report works.