How long were users connected reports?

[dennis.longneck[email protected]]

I am trying to generate some reports to see how many people used the VPN last monday and tuesday, and for how long they were connected.   The logs I am looking at are very verbose and would take a long time to coorelate that data.  Curious if there are other reports, or scripts I can run on that data, to generate what I need?

What I am looking for

USER1  Connected 02/02/2019 at 0800 for 1 hour

USER2  Connected 02/02/2019 at 0812 for 1.5 hours

Or something similiar....

Dennis

[zanyterp]

Unfortunately, that is not something the appliance stores/generates.
If your syslog/log aggregator supports it, you could filter for when the user logs in (login succeeded for USERNAME; AUT31504 is this message ID) and then when the session ends (session ended for USERNAME; AUT22886 for a session timeout; or logout [AUT22673])