blocked searches report

[Mbutler522010]

So I just got my shiny new 200D...yaaa...and now I have the original request that started all of this.

The school Principals want to know if any of their students are searching for bad stuff. They are confident I am blocking it with the Fortigate but they want to know who is trying to get to that stuff and what they are specifically searching for. I know the data is in there but I can't figure out how to get it out.

There are datasets for number of blocked websites, number of users by blocked websites, etc. but nothing that seems to match what I am looking for. However I am no expert on datasets...

Is there an easy way to get something like:

  Top 5 people who's searches were blocked.

  (1) "Johnny" searched for:

     badword1

     badword2

     .

     .

     .