Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 5 subscribers
  • Views 8874 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Wrong values in reports Total User By Time

eclipse79

Hello,

I have a client that constantly monitors the status of some web sites. It runs h24. In daily reports -> Web Usage -> TOP10 Users by time it is obviously at first position, but I noticed that the value is 27 hours... 27?! It seems also that other clients that are ON for 8 hours spent 10hours in web usage... How is calulated this value? 

 

Thanks

eclipse79



This thread was automatically locked due to age.
Parents
  • 0

    1) Based on your data, I am guessing that UTM is charging for elapsed time, which accumulates as long as the user does something on the site new within a fixed time period.   The goal is to monitor the amount of time that his eyes are on the site, not the amount of workload generated by the site.   To my knowledge, this algorithm is not published for UTM.  I used to run a Sophos Web Appliance, and I think an algorithm like this may have been published in its documentation.  But Sophos Support would be the best source for the truth.

    2) If the user has more than one tab active, elapsed time could (and arguably should) accumulate on each tab, in parallel. 

    3) Most websites fire off additional web requests to load web elements, style sheets, images, and who knows what else.   These operations might also trigger either actual or elapsed time accumulations, and can presumably accumulate in parallel.

    So I am guessing that there is an explanation, but probably not something that Sophos will have any appetite to fix.

     

Reply
  • 0

    1) Based on your data, I am guessing that UTM is charging for elapsed time, which accumulates as long as the user does something on the site new within a fixed time period.   The goal is to monitor the amount of time that his eyes are on the site, not the amount of workload generated by the site.   To my knowledge, this algorithm is not published for UTM.  I used to run a Sophos Web Appliance, and I think an algorithm like this may have been published in its documentation.  But Sophos Support would be the best source for the truth.

    2) If the user has more than one tab active, elapsed time could (and arguably should) accumulate on each tab, in parallel. 

    3) Most websites fire off additional web requests to load web elements, style sheets, images, and who knows what else.   These operations might also trigger either actual or elapsed time accumulations, and can presumably accumulate in parallel.

    So I am guessing that there is an explanation, but probably not something that Sophos will have any appetite to fix.

     

Children
No Data
Unfiltered HTML