06-29-2018 10:55 AM
So this report will really only be helpful if you are aiming to get which user logged in when. I would likely set it up so that the Culumns has the User, IP, Source Name, Device Name, Day, Count, and Source Type present (Possible Hour). Then you would control the time in which you are searching via the 'Time Frame' field when you are building the custom report.
What the report should give you at the end of the day is essentially that user 'bpry' logged into globalprotect on Sun, Jun 24, 2018 a total of 3 times. Since you aren't looking at the actual GlobalProtect information that's all you'll be able to view.
