I have pulled VPN logs and I'd like to report on the duration that a user has used the VPN tunnel.
I have found the event that shows a disconnected VPN session.
It has the duration information and the user name. I don't know how to create a chart that will include the user name and the duration to next to it.
I have Chart by count Duration (Duration is a field I created)
But I can't seem to put in a search string to show Username and duration next to it.
That is a very good answer, that answers half my question.
I'm now getting data showing, but I want the duration next to the user name, I'm getting the duration over the top and the count next to the user name.
What would I put instead of count?
Sorry, I get this error message.
Error in 'chart' command: The specifier 'Duration' is invalid. It must be in form
I get where you are going and I hope it can be that simple, other ideas?