Global search

Global Search lets you explore log messages collected by FortiAnalyzer-BigData across all ADOMs. When searching with a Federation, you can search across multiple clusters.

Use Global Search to identify trends in the data with the Histogram and detailed log messages at the same time. You can quickly explore log messages by selecting the type and labels and pivoting directly from the fields in the log details with just a few clicks. Perform advanced queries with rich LogQL (log query language). Cross-cluster search federation allows you to run searches against one or more remote FortiAnalyzer-BigData clusters and compare the results in a single view.

This section contains the following topics:

• Starting a global search

• Log types (Global Search)

• Create a new Search Federation (Example)

• Log Query Language (LogQL)