This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Viewing FULL Urls in Web Usage Report UTM 9.310

Hi,

I have been asked to retrieve the web logs for a particular user in a particular time frame but we actually need to see the full Urls they have visited. For example, when I add a filter of user and time it shows that googlevideo.com is their top site but I want to actually see which YouTube Urls they went to in that period. Can anyone point me in the right direction to see these?

Cheers,
Brendan


This thread was automatically locked due to age.
Parents Reply Children
  • James, for example, I started a report and got:

    Then, I did a search on the log files:

    That gave me the following line among others:

    /var/log/http.log:2018:07:31-00:51:37 secure httpproxy[6359]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="172.21.1.155" dstip="172.217.9.10" user="balfson" group="" ad_domain="ourdomain" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="6887" request="0xe334b200" url="https://www.googleapis.com/" referer="" error="" authtime="0" dnstime="16040" cattime="83931" avscantime="0" fullreqtime="240443770" device="0" auth="0" ua="" exceptions="" category="178" reputation="trusted" categoryname="Internet Services" country="United States" application="googapis" app-id="176"
     
    Here you see the full URL that the user visited.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA