Version:

Version:

Version:


Table of Contents

New Features

Download PDF
Copy Link

FortiAnalyzer Fabric usability improvements

System Settings > FortiAnalyzer Fabric is a new GUI to easily setup a FortiAnalyzer Fabric Cluster.

The supervisor node provides a centralized view for the whole cluster. Card style summary dashboards are available in the supervisor's Device Manager, and filters can be applied to those summary dashboards.

This topic includes:

For more information about FortiAnalyzer Fabric, see the FortiAnalyzer Fabric Deployment Guide.

Configuring a FortiAnalyzer Fabric from the GUI

To configure a supervisor from the GUI:
  1. Confirm you are in the GUI for the FortiAnalyzer that will be the supervisor.
  2. Go to System Settings > FortiAnalyzer Fabric.
  3. Set Status to enabled.
  4. Configure the following settings for the supervisor, and then click Apply to save.
    Role Select Supervisor.
    Cluster Name Type a name for the FortiAnalyzer Fabric.
    Password Type a password for the FortiAnalyzer Fabric.
    Session Port Default = 6443. Type the communication port if not using the default.
    Secure Connection Enable or disable secure connection.

To configure a member from the GUI:
  1. Confirm you are in the GUI for the FortiAnalyzer that will be a member.
  2. Go to System Settings > FortiAnalyzer Fabric.
  3. Configure the following settings for the member, and then click Apply to save.
    Role Select Member.
    Cluster Name Type the name of the FortiAnalyzer Fabric.

    IP

    Type the IP of the supervisor for the FortiAnalyzer Fabric.

    Password Type the password configured for the FortiAnalyzer Fabric.
    Session Port Default = 6443. Type the communication port if not using the default.
    Secure Connection Enable or disable secure connection.

To view the FortiAnalyzer Fabric from the supervisor:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to System Settings > FortiAnalyzer Fabric.

    Once the supervisor and members are connected and synchronized, the Fabric Members table includes the following information for each FortiAnalyzer in the FortiAnalyzer Fabric:

    Name The name of the FortiAnalyzer.
    Role The role of the FortiAnalyzer in the FortiAnalyzer Fabric (supervisor or member).

    IP

    The IP address of the FortiAnalyzer.

    Status The status of the FortiAnalyzer.

Viewing member devices from the FortiAnalyzer Fabric supervisor

To use the summary charts in Device Manager:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to Device Manager.

    Five summary charts are available:

    • Fabric Members
    • ADOMs
    • Device Types
    • Status
    • Critical Alerts

    By default, the Show Charts toggle is enabled. You can select which charts appear by selecting them in the Show Charts dropdown, or you can hide all the charts by disabling the Show Charts toggle.

  3. Hover your cursor over the charts to see more information about the data in a tooltip.

  4. Click an area on a chart or in its legend to filter Device Manager by that information.

    You can click multiple charts and legends to apply multiple filters. A filter icon appears next to the chart title when it is being used to filter the Device Manager.

  5. To remove the filters, click the title of the charts that were used.

To use the table in Device Manager:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to Device Manager.

    The table in the Device Manager provides the following information about each FortiAnalyzer Fabric member:

    Name The name of the FortiAnalyzer Fabric member.
    Platform The device's platform.
  3. Click Expand All.

    FortiAnalyzer Fabric member ADOMs are displayed below each member. Each ADOM includes their authorized logging devices. The following information is displayed for each device and VDOM in the table:

    Name The name of the device.
    IP Address The IP address of the device.
    Platform The platform of the device.
    Logs

    The real time log status.

    A green circle indicates that logs are being sent. A red circle indicates that logs are not being sent. The status indicator will turn from green to red when logs have not been sent for 15 minutes or longer.

    Average Log Rate (Logs/Sec)

    The average log rate per second. This information is only available when the device is sending logs in real time.

    Device Storage

    The amount of storage used by the device or VDOM.

FortiAnalyzer Fabric usability improvements

System Settings > FortiAnalyzer Fabric is a new GUI to easily setup a FortiAnalyzer Fabric Cluster.

The supervisor node provides a centralized view for the whole cluster. Card style summary dashboards are available in the supervisor's Device Manager, and filters can be applied to those summary dashboards.

This topic includes:

For more information about FortiAnalyzer Fabric, see the FortiAnalyzer Fabric Deployment Guide.

Configuring a FortiAnalyzer Fabric from the GUI

To configure a supervisor from the GUI:
  1. Confirm you are in the GUI for the FortiAnalyzer that will be the supervisor.
  2. Go to System Settings > FortiAnalyzer Fabric.
  3. Set Status to enabled.
  4. Configure the following settings for the supervisor, and then click Apply to save.
    Role Select Supervisor.
    Cluster Name Type a name for the FortiAnalyzer Fabric.
    Password Type a password for the FortiAnalyzer Fabric.
    Session Port Default = 6443. Type the communication port if not using the default.
    Secure Connection Enable or disable secure connection.

To configure a member from the GUI:
  1. Confirm you are in the GUI for the FortiAnalyzer that will be a member.
  2. Go to System Settings > FortiAnalyzer Fabric.
  3. Configure the following settings for the member, and then click Apply to save.
    Role Select Member.
    Cluster Name Type the name of the FortiAnalyzer Fabric.

    IP

    Type the IP of the supervisor for the FortiAnalyzer Fabric.

    Password Type the password configured for the FortiAnalyzer Fabric.
    Session Port Default = 6443. Type the communication port if not using the default.
    Secure Connection Enable or disable secure connection.

To view the FortiAnalyzer Fabric from the supervisor:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to System Settings > FortiAnalyzer Fabric.

    Once the supervisor and members are connected and synchronized, the Fabric Members table includes the following information for each FortiAnalyzer in the FortiAnalyzer Fabric:

    Name The name of the FortiAnalyzer.
    Role The role of the FortiAnalyzer in the FortiAnalyzer Fabric (supervisor or member).

    IP

    The IP address of the FortiAnalyzer.

    Status The status of the FortiAnalyzer.

Viewing member devices from the FortiAnalyzer Fabric supervisor

To use the summary charts in Device Manager:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to Device Manager.

    Five summary charts are available:

    • Fabric Members
    • ADOMs
    • Device Types
    • Status
    • Critical Alerts

    By default, the Show Charts toggle is enabled. You can select which charts appear by selecting them in the Show Charts dropdown, or you can hide all the charts by disabling the Show Charts toggle.

  3. Hover your cursor over the charts to see more information about the data in a tooltip.

  4. Click an area on a chart or in its legend to filter Device Manager by that information.

    You can click multiple charts and legends to apply multiple filters. A filter icon appears next to the chart title when it is being used to filter the Device Manager.

  5. To remove the filters, click the title of the charts that were used.

To use the table in Device Manager:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to Device Manager.

    The table in the Device Manager provides the following information about each FortiAnalyzer Fabric member:

    Name The name of the FortiAnalyzer Fabric member.
    Platform The device's platform.
  3. Click Expand All.

    FortiAnalyzer Fabric member ADOMs are displayed below each member. Each ADOM includes their authorized logging devices. The following information is displayed for each device and VDOM in the table:

    Name The name of the device.
    IP Address The IP address of the device.
    Platform The platform of the device.
    Logs

    The real time log status.

    A green circle indicates that logs are being sent. A red circle indicates that logs are not being sent. The status indicator will turn from green to red when logs have not been sent for 15 minutes or longer.

    Average Log Rate (Logs/Sec)

    The average log rate per second. This information is only available when the device is sending logs in real time.

    Device Storage

    The amount of storage used by the device or VDOM.