end_time syntax - ipSec VPN report

[alexandr_nae]

Hi, i am trying to create a IPSec vpn report that should contain -  "start_time/duration/end_time".

I search a lot of ways to create it, i managed to create start time and duration, but i cannot find "end_time" as a template in FAZ 200F, anyone with ideas how to create and insert the syntax ?

Thanks.

[alexandr_nae]

Almost done with the following BUT, something is wrong and i dont get it. I cannot extract user_name from the syntax bellow, any ideas whats wrong ? Thx.

SELECT

  a.`user`,a.login,b.logout,b.duration,b.transferred_bytes

FROM     ###( SELECT   `user`,min(from_dtime(dtime)) AS login,tunnelid         FROM     $log-event          WHERE    action='tunnel-up' and $filter          GROUP BY `user`,tunnelid)### a,          ###( SELECT   max(from_dtime(dtime)) AS logout,duration,sum(sentbyte+rcvdbyte)AS transferred_bytes,                            tunnelid                   FROM     $log-event                   WHERE    action='tunnel-down' and $filter                   GROUP BY duration,tunnelid HAVING   sum(sentbyte+rcvdbyte)>0 )### b WHERE    a.tunnelid=b.tunnelid ORDER BY login,          `user`