Page 1 of 2 12 LastLast
Results 1 to 10 of 17
  1. #1
    jjj
    jjj is offline
    Untanglit
    Join Date
    Mar 2009
    Posts
    25

    Default Full Individual Report??

    Is there a way to get every website (full URL) that a user (ip address) visited? The main report only contains a short list of them.

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,491

    Default

    Yes, there is a section of the web filter report where you can get a detailed view per ip and user.

    Open the HTML report, in *untangleip*/reports

    Click Web Filter, and look below the numbers. You have 5 reports to choose, Summary, User Summary, and Logged Violations by user, time, and client.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    jjj
    jjj is offline
    Untanglit
    Join Date
    Mar 2009
    Posts
    25

    Default

    Yeah, I saw those. But the they don't tell you the full URL and don't give a timestamp. Is there any way to query the database manually?

  4. #4
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,491
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  5. #5
    jjj
    jjj is offline
    Untanglit
    Join Date
    Mar 2009
    Posts
    25

    Default

    Sweet. Thanks!

  6. #6
    jjj
    jjj is offline
    Untanglit
    Join Date
    Mar 2009
    Posts
    25

    Default

    Ok...I have access to the database thanks to that awesome post.

    Now.......where is the data? I see the hit report table Schema>reports>webpages_date (which includes the domain and timestamp for each IP Address), but where are the exact, full URLs stored? I can't seem to find those. What table is the violation stuff stored in (that has the full URL I'm talking about, except I want it for more than just violations...I want every URL the user went to).

    Thanks!

  7. #7
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,491

    Default

    That is the question, there are no database maps so you get to shuffle through that on your own.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  8. #8
    jjj
    jjj is offline
    Untanglit
    Join Date
    Mar 2009
    Posts
    25

    Default

    But someone has to have dug in there before. I don't think the full URL is stored in the database.... It is probably written out to some log then parsed through later.

  9. #9
    jjj
    jjj is offline
    Untanglit
    Join Date
    Mar 2009
    Posts
    25

    Default

    Oh! I think I found something... Under Schemas > Events > Tables > n_http_req_line it looks like it is the other half of the URL (the details half). Now I just need to match up the domain with this stuff.... hmmmmmmmm.

  10. #10
    jjj
    jjj is offline
    Untanglit
    Join Date
    Mar 2009
    Posts
    25

    Default

    Found it... The n_http_evt_req table has the domain..

    Sweetness.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2