referrerurl

[barrycuda72]

I have a requirement to produce end user web browsing reports.  The canned reports are ok but they include so much garbage like ad links and such that the report is almost worthless.  I have applied category filters which help but not a lot.

Is there a way I can take advantage of the referrerurl logging that is avalable in 5.4?  I have the logging enabled but not for sure how to configure a report or dataset on the Analyzer to take advantage of this.

from release notes Add http.referrer url to web filter logs (260538) Field name is 'referralurl. 

[chall_FTNT]

Two good categories to exclude would be: content server and advertising.  You can either exclude them in your report.  Or configure FortiGate not to send logs for those categories by setting action to ALLOW.

Not sure of a way you reliably use field referralurl.  I suppose you could exclude logs in which that field is NOT empty but that might exclude more than you want.