Detailed web reports are useful if you need to need to figure out which user visited what website. If all you are worried about is data limit numbers, you may like to run a Usage report instead.

To create the report and if you are using Sonar version 3.2.13 or higher navigate to "Reports -> Advanced Reports -> Web"

N.B, If you cannot get to the advanced reports you will need to go to "Report -> Configuration -> Reporting Levels" and choose "Advanced Reports" and click "Apply". then try again.To create the report and if you are using Sonar version 3.2.12 or lower navigate to "Reports -> Web"

Then click "Add detailed". You then have the following information to be entered:

  • Access Level: Usually defaults to 1. If you don't use any other access levels because you don't have multiple Admins of your system, this is safe to leave at whatever it defaults to (usually 1).
  • Report Name: This is the name of the report. If you are going to reuse this report, you may want to keep the name generic (eg. Individual detailed, Group detailed, etc)
  • Selection: You have the option of choosing "Users" or "Groups". After clicking the radio button, hit the plus (+) button to add users/groups. If you make a mistake, just highlight your selection and hit the minus (-) button
  • Filters: If you want to decrease the selection criteria, you can choose from the following:
    • Cache: You can report on only cache HIT or cache MISS objects. If you want to report on both, omit this filter.
    • Client Source: If the user has more than one IP address, you can narrow down the detailed report to only one IP address. If you want to see all locations that the user has accessed data, omit this filter.
    • Policy Expression: You can create an expression to see all websites that match a particular phrase. (Eg. isBlockDomain classifyName=CT-SocialNetworking - to see all social networking hits)
    • Time Range(00:00-23:59): Takes the form of 24 hour time and is separated with a hyphen. 
    • URL Expression: Takes a regular expression and allows matching based on an expression (eg. facebook|myspace - will match facebook or myspace)
    • URL or Part URL: Takes and matches on a phrase. Eg. twitter will match or

  • Summary:  You can summarise the information otherwise you will get a lot of detail. Some of the summary attributes that you can add are:
    • Accesses: You can sort the information based on the number of "page hits" (how many times did the user refresh and get content from that site/url), "bytes hit" (how big is the data the user grabbed from the site/url) or "group reason" (how many times did they come up against a blocked site that was categorised as social networking, or pornography).
    • Format: N.B. Adding this attribute will cause the report to run for a LONG time. The reason for this is because you then have to sort by either: "Report per user", "Site by User" (grabs like the top N value sites and the top N users for the sites) or "User by Site" (Grabs the Top N users, and displays the Top N sites beside it)
    • Path Depth: The amount of data you want to see after the domain. Eg. if you had a domain: - A Path Depth of 0 is, A path depth of 1 is and a path depth of 2 will display
    • Top N: The top number of entries to display, eg Top 20, Top 50, Top 100, etc.


Finding out a user's detailed information

Report Name: User Detailed
Selection: User (Click +, then choose the user and click "Add")
Filters: leave blank
Summary: leave blank

Click Apply


Finding out a user's summary by bytes

Report Name: User Summary - Bytes
Selection: User (Click +, then choose the user and click "Add")
Filters: leave blank
Summary: Accesses = Page hit
         Path depth = 0
         Top N = 20

Click Apply


Finding out naughty groups at lunch time

Report Name: URL Group Report
Selection: Groups (Click +, then choose the group eg. students and click "Add")
Filters: URL or Part URL = facebook
         Time Range(00:00-23:59) = 13:00-14:00
Summary: leave blank

Click Apply