SIEM & UEBA

Back to discussions
Expand all | Collapse all

Duration of website visits

  • 1.  Duration of website visits

    Posted 29 days ago

    Hello All,

    Is there a way to calculate the duration or time spent on a website by a user/Source IP.

    This is more from an UEBA perspective and how productive our remote access users are (how evil I know).

    BR,

    Ali.



  • 2.  RE: Duration of website visits

    GROUP ADMIN
    Posted 23 days ago
    Hi Ali,

    HTTP being stateless will mean that you will see the time of the connection, but you will not be able to see the time spent on site unless there is a continuous call back. You can do something like this to show the time between the first and last seen event for a Source IP address

    Thanks

    Dan



    ------------------------------
    Daniel
    FortiSIEM Product Manager
    ------------------------------

    Original Message