Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Dmitriy
New Contributor

User report with bandwidth more then 8 Gb

Good afternoon! I have to make a report with the users whose traffic exceeds 8 GB per month. I formed Daset and it works correctly.

Dataset:

select coalesce(nullifna(`user`), nullifna(`unauthuser`), ipstr(`srcip`)) as user_src, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth, sum(coalesce(rcvdbyte, 0)) as traffic_in, sum(coalesce(sentbyte, 0)) as traffic_out, count(*) as sessions from $log where $filter and logid_to_int(logid) not in (4, 7, 14) group by user_src having sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0))>8589934592 order by bandwidth desc

Answer dataset:

User135,369,256,69134,364,302,1501,004,954,541128,694User221,554,866,67321,068,549,543486,317,13038,515User320,008,767,42719,264,670,852744,096,575174,823User417,295,362,95115,710,305,4861,585,057,46582,488User515,714,387,91614,970,889,199743,498,71766,21User613,465,465,87413,009,276,608456,189,26697,073User712,417,131,22012,099,502,104317,629,11648,073User812,380,196,76611,028,109,6931,352,087,07357,715User912,321,302,90811,885,993,681435,309,22785,966User1011,798,190,09411,485,453,193312,736,90151,529User1111,141,326,28510,777,496,136363,830,149115,87User1210,907,830,84110,384,630,534523,200,30761,699User1310,867,487,19110,126,494,552740,992,639179,881User1410,862,346,38510,383,281,467479,064,918148,566User1510,403,770,87410,105,319,717298,451,15749,795User169,372,086,8939,032,419,036339,667,85782,852User179,170,300,6448,954,301,109215,999,53521,383User189,169,358,1228,622,143,986547,214,136408,707User199,019,467,9418,627,627,338391,840,60372,401User208,843,710,7148,601,408,629242,302,08513,666User218,667,455,8878,415,188,865252,267,02237,511

But after when formed chart and report, it does not output anything.

Answer report:

No matching log data for this report

Probably not correctly performed unification of values and calculation of the amount. Help me please!!!!!!!

1 Solution
hzhao_FTNT

Hi Abel, currently 5.4.0 GA release is scheduled to Jan.

 

Cheers,

hz

View solution in original post

5 REPLIES 5
hzhao_FTNT
Staff
Staff

Hi there,

 

Nothing wrong with your dataset. If you see empty report, please change your report time period to a shorter time like "yesterday" or specify last N hours. If works, then it could be caused by your device quota reached. We have some issues on 5.2 when device quota reached and high log rate, it will be fixed in 5.4.0 GA.

For now, please increase your device quota or select a shorter report period.

 

Regards,

hz 

abelio
Valued Contributor

Hello HZ,

 

hzhao_FTNT wrote:

 it will be fixed in 5.4.0 GA.

 

could you share here expected release date?

 

Thanks for your help in this forum

regards




/ Abel

regards / Abel
hzhao_FTNT

Hi Abel, currently 5.4.0 GA release is scheduled to Jan.

 

Cheers,

hz

Dmitriy

Per day not to exceed the user allotted limit of 8 GB, so that there is no possibility to check. The report works correctly if the request does not set> 8589934592 bytes, and put a> 0. Is it possible to create a filter with a value of bandwidth Equal to > 8589934592 ?

hzhao_FTNT

Our report/chart filter only support "Equal To" or "Not Equal To", you have to do this in dataset.

Please try to increase report time period gradually by  last N days, and see if it works.

Dmitriy wrote:

Per day not to exceed the user allotted limit of 8 GB, so that there is no possibility to check. The report works correctly if the request does not set> 8589934592 bytes, and put a> 0. Is it possible to create a filter with a value of bandwidth Equal to > 8589934592 ?

Labels
Top Kudoed Authors