Fortinet white logo
Fortinet white logo

New Features

Dataset editor update 7.0.3

Dataset editor update 7.0.3

Dataset editor is enhanced to provide better user experience when creating or updating a custom dataset. SQL queries created or updated in this editor are color coded, and available table names and log fields can be shown to the admin by mousing over the query.

The dataset editor also provides options to:

  • Format the query
  • Validate the query based on the dataset/report dataset rules
  • Analyze the query to provide SQL query information in terms of hcache and SQL validation result
To use the dataset editor:
  1. Go to Reports > Dataset, and select the checkbox for a predefined dataset.
  2. From the More dropdown, click Clone.

    In this example, the admin clones a predefined query to demonstrate features of the dataset editor. You can also create or edit a custom dataset according to your needs.

    The SQL query in the Query field is color coded.

  3. To view the log fields available in a table, mouse over the related area in the Query field.

    In the example below, the admin mouses over from $logs to view the log fields available in that table.

  4. To view the query in a structured format, click Format.

  5. Input a space after a from clause in the query to see a list of available tables.

    You can select an option in the list or continue typing to edit the query.

  6. Input a space after a select, and, where, or similar clause to see a list of log fields in the table.

    The log fields appear in alphabetical order. You can select a log field in the list or continue typing to edit the query.

  7. Input a space after a order by, group by, or similar clause to see a list of log fields to use.

    The log fields appear in alphabetical order. You can select a log field in the list or continue typing to edit the query.

  8. To validate the query based on the dataset/report dataset rules, click Validate.

    If any warnings or errors exist, they display below the Validate button so the admin can correct them in the Query field.

    In this example, a portion of the query was removed to display an error after clicking Validate.

  9. Once the warnings and errors are corrected in the Query field, click Validate again.

    If there are no warnings or errors, OK displays below the Validate button.

  10. To view SQL query information in terms of the hcache, click Analyze Query.

Dataset editor update 7.0.3

Dataset editor update 7.0.3

Dataset editor is enhanced to provide better user experience when creating or updating a custom dataset. SQL queries created or updated in this editor are color coded, and available table names and log fields can be shown to the admin by mousing over the query.

The dataset editor also provides options to:

  • Format the query
  • Validate the query based on the dataset/report dataset rules
  • Analyze the query to provide SQL query information in terms of hcache and SQL validation result
To use the dataset editor:
  1. Go to Reports > Dataset, and select the checkbox for a predefined dataset.
  2. From the More dropdown, click Clone.

    In this example, the admin clones a predefined query to demonstrate features of the dataset editor. You can also create or edit a custom dataset according to your needs.

    The SQL query in the Query field is color coded.

  3. To view the log fields available in a table, mouse over the related area in the Query field.

    In the example below, the admin mouses over from $logs to view the log fields available in that table.

  4. To view the query in a structured format, click Format.

  5. Input a space after a from clause in the query to see a list of available tables.

    You can select an option in the list or continue typing to edit the query.

  6. Input a space after a select, and, where, or similar clause to see a list of log fields in the table.

    The log fields appear in alphabetical order. You can select a log field in the list or continue typing to edit the query.

  7. Input a space after a order by, group by, or similar clause to see a list of log fields to use.

    The log fields appear in alphabetical order. You can select a log field in the list or continue typing to edit the query.

  8. To validate the query based on the dataset/report dataset rules, click Validate.

    If any warnings or errors exist, they display below the Validate button so the admin can correct them in the Query field.

    In this example, a portion of the query was removed to display an error after clicking Validate.

  9. Once the warnings and errors are corrected in the Query field, click Validate again.

    If there are no warnings or errors, OK displays below the Validate button.

  10. To view SQL query information in terms of the hcache, click Analyze Query.