<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: URL report top 100 with browsing time in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/url-report-top-100-with-browsing-time/m-p/213792#M62163</link>
    <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/54755"&gt;@TimmyLamar&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;We see requests like this a lot and everything that&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/16592"&gt;@Remo&lt;/a&gt;&amp;nbsp;said is true, he even gave you way more information on how you would do so than what is usually given. Generally the consessus that everyone comes to is that there is no way to provide a report like this with any amount of viable accuracy.&amp;nbsp;&lt;/P&gt;&lt;P&gt;If the request is because someone wants to view the information and fully knows that it may not be accurate and that they can't make any determinations on it, then fine. If this is a request because they want to get HR envolved or sit the employee down because they forgot to close a browser tab, then it's better to simply not provide the report at all.&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 09 May 2018 19:40:58 GMT</pubDate>
    <dc:creator>BPry</dc:creator>
    <dc:date>2018-05-09T19:40:58Z</dc:date>
    <item>
      <title>URL report top 100 with browsing time</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/url-report-top-100-with-browsing-time/m-p/213711#M62140</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;i was trying to get as close as possible to bluecoat report that able to provide&lt;/P&gt;&lt;P&gt;1.URL visited&lt;/P&gt;&lt;P&gt;2.URL category&lt;/P&gt;&lt;P&gt;3.Browse time&lt;/P&gt;&lt;P&gt;4.User&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;So the closest i can get is URL report with counts, but not browse time,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;secondly i can get Traffic logs with elapsed time, without URL info.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;is there anyway i can mix them with api function?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;thanks in advance&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 09 May 2018 10:43:21 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/url-report-top-100-with-browsing-time/m-p/213711#M62140</guid>
      <dc:creator>TimmyLamar</dc:creator>
      <dc:date>2018-05-09T10:43:21Z</dc:date>
    </item>
    <item>
      <title>Re: URL report top 100 with browsing time</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/url-report-top-100-with-browsing-time/m-p/213788#M62162</link>
      <description>&lt;P&gt;If you are willing to write a script, then yes this is absolutely possible with the API. (Very simplyfied) pull the URL Logs and then get the elapsed time from the traffic log - the "primary key" here is the session ID. With the session ID you can mix them together.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;And now my personal opinion to reports with browse time: they are crap. There is almost no way to really distinguish between the actual time the user actively spent with web-browsing and background browser sessions. Connections to modern (ajax based, heavily javascript dependant, dynamic) websites stay open even when the user isn't actively viewing the website, while for example a user could spend hours to read a big wikipedia article but in the report you only see a few seconds as the session closes when the content is downloaded. In this example the other employee who opens facebook for like 2 minutes in the morning, but does not close the tab will probably show up in the report that he is using facebook 9/5.&lt;/P&gt;&lt;P&gt;As I have never actively used a bluecoat product, this may not apply to this report. As I wrote it is almost impossible to do such a report. With heavy data analytics or if bluecoat injects a javascript into every web browsing session it gets feasable to have browsing times that are way more realistic than a simple session time report.&lt;/P&gt;</description>
      <pubDate>Wed, 09 May 2018 19:15:49 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/url-report-top-100-with-browsing-time/m-p/213788#M62162</guid>
      <dc:creator>Remo</dc:creator>
      <dc:date>2018-05-09T19:15:49Z</dc:date>
    </item>
    <item>
      <title>Re: URL report top 100 with browsing time</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/url-report-top-100-with-browsing-time/m-p/213792#M62163</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/54755"&gt;@TimmyLamar&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;We see requests like this a lot and everything that&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/16592"&gt;@Remo&lt;/a&gt;&amp;nbsp;said is true, he even gave you way more information on how you would do so than what is usually given. Generally the consessus that everyone comes to is that there is no way to provide a report like this with any amount of viable accuracy.&amp;nbsp;&lt;/P&gt;&lt;P&gt;If the request is because someone wants to view the information and fully knows that it may not be accurate and that they can't make any determinations on it, then fine. If this is a request because they want to get HR envolved or sit the employee down because they forgot to close a browser tab, then it's better to simply not provide the report at all.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 09 May 2018 19:40:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/url-report-top-100-with-browsing-time/m-p/213792#M62163</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2018-05-09T19:40:58Z</dc:date>
    </item>
  </channel>
</rss>

