How to see the user-agent, browser and its version

[spacemeb]

Hello,

I think it's not possible to see the user-agent, browser and its version, but is there any way to do that? 

For an IP/Username to check the user-agent?

As far as I know it's only possible when I download the log subscription file (access logs) or from grep.

Any ideas?

[balaji.bandi · Accepted solution]

Not that i have seen in GUI - from CLI as below

SSH to WSA

> grep

type 1  - 1. "accesslogs" Type: "Access Logs" Retrieval: FTP Poll

>1

Enter the regular expression to grep.
[]> x.x.x.x (type user or IP address here)

Do you want this search to be case insensitive? [Y]>

Do you want to search for non-matching lines? [N]>

Do you want to tail the logs? [N]> y

Do you want to paginate the output? [N]>

Press Ctrl-C to stop.

you see below information (some information i removed )

1643899147.414 8373 x.x.x.x TCP_MISS/200 26745 CONNECT tunnel://cloudfront.net:443/ - DIRECT/cloudfront.net application/octet-stream
...............................
UsrAgnt: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36"

Hope this helps you, or you looking something else ?

[spacemeb]

Yes, I would prefer GUI

[balaji.bandi]

Not that i have seen or come across....(may be hidden...no i guess)

[Ken Stieers]

If its not currently showing up in the access logs, you need to add it.
In the log subscription for the access logs, add a %u to the Custom Fields box.
You'll see a link there for Custom Fields Reference, which will show you all of the things you can add.

[spacemeb]

it will also visible in web tracking?

[Ken Stieers · Accepted solution]

As far as I can see in my web tracking... no, it doesn't show up in the details.
If you know what user agent you need to track, you could create a policy for it.. and then filter tracking based on policy.

[balaji.bandi]

@Ken Stieers - may be i have ignored here...you mean you can view this over GUI web-tracking ?

[Ken Stieers]

As far as I can tell, no.. you can't see user agent in web tracking.
You can get the User Agent to show up in the access logs (adding %u), but it doesn't show up in tracking, in either of the old gui, or new gui.

[zoeydaisy.91]

Every browser sends its user agent in a different format, so decoding them can be very tricky.