I've created a custom report to show user bandwidth by date but it always returns 'No matching log data for this report'
I created the data set and when I run it I see the expected results.
I then created the chart and if I test for real data I see the expected results.
Finally I added my chart to a report and run it without any device filtering. No data, I've tried:
For past 1,2 7 and 30 days.
Any help is appreciated:
This is my query (based on Log Type - Event):
select
myUser
,myDate
--,min(s_time) as s_time
--,max(e_time) as e_time
,(case when min(s_time)=max(e_time) then max(max_traffic_in)+max(max_traffic_out)
else max(max_traffic_in)-min(min_traffic_in)+max(max_traffic_out)-min(min_traffic_out) end) as bandwidth
,(case when min(s_time)=max(e_time) then max(max_traffic_in)
else max(max_traffic_in)-min(min_traffic_in) end) as traffic_in
,(case when min(s_time)=max(e_time) then max(max_traffic_out)
else max(max_traffic_out)-min(min_traffic_out) end) as traffic_out
from ###(
select
coalesce(nullifna(`user`), ipstr(`remip`)) as myUser
,from_itime(dtime)::date as myDate
--,max(coalesce(duration,0)) as max_duration
--,min(coalesce(duration,0)) as min_duration
,min(coalesce(dtime, 0)) as s_time
,max(coalesce(dtime, 0)) as e_time
,min(coalesce(sentbyte, 0)) as min_traffic_out
,min(coalesce(rcvdbyte, 0)) as min_traffic_in
,max(coalesce(sentbyte, 0)) as max_traffic_out
,max(coalesce(rcvdbyte, 0)) as max_traffic_in
,max(coalesce(rcvdbyte, 0)+coalesce(sentbyte, 0)) as max_traffic
from $log
where $filter
and subtype='vpn'
and tunneltype = 'ssl-tunnel'
and action in ('tunnel-stats', 'tunnel-down', 'tunnel-up')
and coalesce(nullifna(`user`), ipstr(`remip`)) is not null
and tunnelid is not null
and dtime is not null
group by myUser, myDate)### t
group by myUser, myDate
order by myUser
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
I removed my comments from my query and now the report works.
I removed my comments from my query and now the report works.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1697 | |
1092 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.