On the 'Top Websites by User' report there is an option to view report with IPs or view with AD users.

  • 1
  • Question
  • Updated 5 years ago
Is it possible to display a report with both in one table? 
Photo of Andy

Andy

  • 44 Posts
  • 2 Reply Likes

Posted 5 years ago

  • 1
Photo of Aisling Brennan

Aisling Brennan, Official Rep

  • 392 Posts
  • 8 Reply Likes
Yes, this can be done.

View the syntax that was used to generate the Top Websites by Users report, click More Actions on the report menu bar and select Report Syntax. The code that was used to query the database and extract the results is displayed.

The syntax of existing report should look something like this:

Def tmp_user_info uid 4, logonname 0b, name 0b, dept 0b index uid
Temporary tmp_user_info user_info uid, logonname, name where {logonname#lname#Logon Name#regexp}
Query event,web_access,tmp_user_info [name.2#Full Name#text], [logonname.2#Logon Name#text], [host#Website Name#text], [count(eid)#Hits#total], [min(timestamp.0)#First#date], [max(timestamp.0)#Last#date] sort=-3 where aid=1 & link=1 & uid.2=uid.0 & {timestamp.0#t#Time#date} & {src#src#Source IP/Subnet#subnet} & {host#host#Website Name#regexp} & {sid#sid#Category#category}
Link down.png View_Breakdown /netmon/view.cgi?View=1&rid=25&t=$t&lname=$1&host=$2 4

Replace existing report syntax with this:

Def tmp_user_info uid 4, logonname 0b, name 0b, dept 0b index uid
Temporary tmp_user_info user_info uid, logonname, name where {logonname#lname#Logon Name#regexp}
Query event,web_access,tmp_user_info [src#IP Address#subnet], [name.2#Full Name#text], [logonname.2#Logon Name#text], [host#Website Name#text], [count(eid)#Hits#total], [min(timestamp.0)#First#date], [max(timestamp.0)#Last#date] sort=-4 where aid=1 & link=1 & uid.2=uid.0 & {timestamp.0#t#Time#date} & {src#src#Source IP/Subnet#subnet} & {host#host#Website Name#regexp} & {sid#sid#Category#category}
Link down.png View_Breakdown /netmon/view.cgi?View=1&rid=25&t=$t&lname=$2&host=$3 5

Then click Save.