First off, here is my setup:

• Firebox Edge X20e-W v 10.2.11, outputting the syslog
• Firewall Analyzer 6

Now, what is being requested of me is this kind of report (with date/time and user) but with the URLs instead.

Similar to below, but showing url's for a particular user instead of for the entire network.