Hi,
I tried to use the column in SmartView and I got answers (for both statistical and logs tables). Also worked as a filter.
So at this point I have a few ideas about this:
1. We have a few views that were made in the following link, perhaps one of those suits for you https://community.checkpoint.com/t5/SmartEvent/bd-p/SmartEvent
2. Please check that the relevant user group appears in the logs you filtered. Best way it to start drill down until you get the actual logs.
3. If information appears on VPN logs, might be the field is not indexed for SmartView. Perhaps creating an event based on this logs (via correlation unit/SmartEvent) we can take the relevant information from the correlated log instead of the VPN.
4. My test logs are IDA based, FYI.
Kind regards, Amir Senn