I have modified default data set. Copy-of-traffic-Top-Sites-By-Browsing-Time
I wante to edit it to show top browsing sites( it did this already), and then in addition, add the users per each site. After editing the code, i was able to get a single user to show up per site, but not top 5 users per site etc. Have been staring at the code for a good while now with no new ideas. Please help :)
select user_src, hostname, appid, catdesc, sum(delta) as browsetime, sum(bandwidth) as bandwidth, sum(traffic_in) as traffic_in, sum(traffic_out) as traffic_out from ###(select (nullifna(`user`), `srcip`) as user_src, hostname, appid, catdesc, sum($browse_time) as delta, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth, sum(coalesce(rcvdbyte, 0)) as traffic_in, sum(coalesce(sentbyte, 0)) as traffic_out from $log where $filter and hostname is not null group by hostname, appid, user_src, catdesc having sum($browse_time)>0 order by delta desc)### t group by user_src, hostname, appid, catdesc order by browsetime desc
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.