Could anyone please suggest how I can search for URL accessed by some user.
I open the data of Ironport and tried searching by Source user(entered username in source User)
Further I checked that All website access data is coming under the sub category "Firewall rule" and I can see the Source IP when I select any website.
So does that mean that I have to select every website then export the data ? Is there any option where I can use username or hostname to get all the websites accessed by user?
Try filtering on Source User by typing in the username in the text field. Then drill down to Event Drilldown -> Custom Types -> URL_Domain
That should give you the list of websites.