Report users web override

[wyldkaarde]

Hi,

We just finished seting up our new environnement. For testing and security purpose, we have a group of specific users that have access to the "override" function when a web page is blocked (variable is %OVERRIDE% on the page). I'm trying te make a report that'll show me which user used the override. What we want to achive here is view is this is really used for testing as requested or just to gain an extra level of access. Anyone knows where this information or if this onformation is stored on the fortianalyzer?

Thanks in advance