• SonicOS 8
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• Dashboard
• System
  • Device
  • Summary
    • Traffic Distribution
    • Top Users
    • Insights
    • Observed Threats
    • Top Countries
      • Dropped
      • Bytes Received
      • Bytes Sent
  • Security Services
  • Network
    • Top Applications
    • Top Addresses
    • Top Users
    • Top Website Ratings
  • Threat
    • Top Intrusion
    • Top Virus
    • Top Spyware
    • Top Botnet
  • DNS Filtering
• Access Points
  • Feature Limitations
  • Access Point Snapshot
  • Client Association
  • Real-Time Bandwidth
  • Client Report
    • OS Type
    • Radio
    • Top Client
  • Real-Time Client Monitor
  • Client Report and Client Monitor Filtering
• Capture ATP
• Topology
  • Managing the Topology View
  • Managing Access Points in the Topology View
    • Editing an Access Point
    • Showing Statistics
    • Monitoring Status on an Access Point
    • Deleting an Access Point
• Real-Time Charts
• System Monitor
  • Using the Toolbar
  • Common Features
    • Legends
    • Tooltips
    • Changing Chart Format
    • Selecting IPv6/IPv4
    • Current, Minimum, Maximum Display
  • Multicore Monitor
  • Applications Bandwidth
  • Interface Usage
    • Packet Rate Monitor
    • Packet Size
  • Connection Usage
    • Active Connection Count
• Protocol Monitor
  • Enabling the Protocol Monitor
  • Using the Toolbar
  • Using Per-Chart Viewing Options
    • Legends
    • Tooltips
• User Monitor
• Bandwidth Monitor
• AppFlow
• AppFlow Report
  • Applications
  • Users
  • IP Addresses
  • Viruses
  • Intrusions
  • Spyware
  • Locations
  • Botnets
  • Web Categories
• AppFlow Monitor
  • Applications
  • Users
  • Web Activity
  • Initiator IPs
  • Responder IPs
  • Threats
  • VoIP
  • VPN
  • Devices
  • Contents
  • Policies
• CTA Report
• SD-WAN
• Monitoring SD-WAN
• Viewing SD-WAN Rules Connections
• Logs
• System Logs
  • Viewing System Logs
  • System Log Functions
  • Display Options
  • Filtering the View
• Auditing Logs
  • Managing the Audit Logs Table
    • Viewing Auditing Logs
    • Manually Emailing Auditing Logs
    • Exporting Auditing Logs
    • Refreshing the Auditing Logs
    • Displaying the Auditing Logs on the console
    • Auditing All Parameters During Addition
• Threat Logs
  • Viewing Threat Logs
  • Threat Log Functions
  • Display Options
• Tools and Monitor
• Using Packet Monitor
  • Benefits of Packet Monitor
  • How Does Packet Monitor Work?
  • Supported Packet Types
  • Configuring Packet Monitor
    • Configuring General Settings
      • Configuring General Settings
      • Configuring the Monitor Filter
      • Configuring Display Filter Settings
      • Configuring Logging Settings
      • Configuring Advanced Monitor Filter Settings
      • Configuring Mirror Settings
        • Starting and Stopping Packet Mirror
    • Monitoring Captured Packets
      • Starting and Stopping Packet Capture
    • Viewing Packet Monitoring Statistics
      • Capture Statistics
      • Local Mirror Statistics
      • Remote Mirror TX Statistics
      • Remote Mirror RX Statistics
      • FTP Statistics
      • Current Buffer Statistics
• Viewing Connections
  • Searching the Connections
  • Filtering the Connection Log
  • Connections Log Functions
• Monitoring Core 0 Processes
• Using Packet Replay
  • Single Packets
    • Packet Crafting
    • Packet Buffer
  • Replay Pcap File
    • Replaying an IP Pcap File
    • Replaying a MAC Pcap File
  • Captured Packets
    • About Captured Packets
    • Packet Detail
    • Hex Dump
• SonicWall Support
  • About This Document

Top Users

The Top Users by Sessions report provides data as it relates to the top users connected to the system.

Click on the List option to see a list view of the data.

You can track top users and activities by filtering on several different options. Click on the setting icon to see the filtering options, including Top Users

• Blocked
• Virus
• Spyware
• Intrusion
• Botnet block
• Data received
• Data sent

For more information, you can click on View Details...:

• If operating in Classic Mode, it goes to MONITOR | Logs > Threat Logs.