"Browser version" by collecting headers

[th3stinger]

Hi MCAfee! 

Hope you are doing well. 

A question has popped up from a customer notifing if it is possible to change the view of a report that we send out weekly. Dont know if this question is present in the community yet! 

The report collect headers and data from the "access.log" in MWG everyday and sumrize it in ePo/CSR which is sent automaticlly to customer every week. 

However, One of the views in the report shows "Web Browsing by agent" is shown as "below/attached screenshot". 

If you look at the screenshot then you notice that it collects a lot of browser version probebbly because of the headers beeing sent to the CSR service. Since we filter http/https it caches all type of request from everybrowser and software all the way to windows media player for instance (and every other software that genereates http/https) traffic. 

This is quite confusing for all of us, and I wonder if there is a KB/better way to collect ONLY browser version and show that in a pre-configured way from CSR/ePo? 

Thanks in advance. 

[smasnizk]

Hi @th3stinger 

it is correct that all User-Agent are logged by default in access.log. We do not limit anything as you might want to find a specific Agent. So the result is that CSR log all Agents to DB. I would suggesting usage of Filters to exclude you're no Interesse in or only run reports for those you want to see.