SonicWall Capture Security Center (CSC) is a web-based application that centralizes management, reporting, and analytics for the SonicWall family of network security appliance and web services. This article is applicable to CSC 1.7 and above, since User based reporting is supported from CSC version 1.7 or higher.
On SonicWall, please navigate to Manage | Logs and Reporting | Appflow Settings | Flow Reporting | GMSFlow Server.
Set the Appflow Reporting Format to IPFIX with Extension v2.
Navigate to ANALYTICS tab and under Global View, click on the respective firewall.
Click on All Traffic | Groups | Users tab, now the data should be displayed with User information.