Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
fran1942
New Contributor

browsetime dataset problem

Hello, I have the following dataset which returns the bandwidth and browsetime of users who visit social media websites.

This report works perfectly when I run the 'test' feature within the dataset, however as soon as I place it in to a report, the output results are distorted i.e. browsetimes should as only 1 or 2 seconds.

Can anyone confirm if this dataset is structured correctly (even though it does work via 'test' in the dataset panel).

 

Dataset attached to this post.

1 Solution
hzhao_FTNT
Staff
Staff

Hi there, bandwidth need to be aggregated in main query, try:

select user_src, sum(bandwidth) as bandwidth, ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) as browsetime from ###(select user_src, sum(bandwidth) as bandwidth, ebtr_agg_flat(browsetime) as browsetime from (select coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src,  ebtr_agg_flat($browse_time) as browsetime, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter and $browse_time is not null and (catdesc = 'Social Networking' or catdesc = 'Shopping' or catdesc = 'Games') group by user_src) t group by user_src order by ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) desc)### t group by user_src order by browsetime desc

 

regards,

hz

View solution in original post

1 REPLY 1
hzhao_FTNT
Staff
Staff

Hi there, bandwidth need to be aggregated in main query, try:

select user_src, sum(bandwidth) as bandwidth, ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) as browsetime from ###(select user_src, sum(bandwidth) as bandwidth, ebtr_agg_flat(browsetime) as browsetime from (select coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src,  ebtr_agg_flat($browse_time) as browsetime, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter and $browse_time is not null and (catdesc = 'Social Networking' or catdesc = 'Shopping' or catdesc = 'Games') group by user_src) t group by user_src order by ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) desc)### t group by user_src order by browsetime desc

 

regards,

hz

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors