Fortinet black logo

New Features

FortiAnalyzer Fabric usability improvements

FortiAnalyzer Fabric usability improvements

System Settings > FortiAnalyzer Fabric is a new GUI to easily setup a FortiAnalyzer Fabric Cluster.

The supervisor node provides a centralized view for the whole cluster. Card style summary dashboards are available in the supervisor's Device Manager, and filters can be applied to those summary dashboards.

This topic includes:

For more information about FortiAnalyzer Fabric, see the FortiAnalyzer Fabric Deployment Guide.

Configuring a FortiAnalyzer Fabric from the GUI

To configure a supervisor from the GUI:
  1. Confirm you are in the GUI for the FortiAnalyzer that will be the supervisor.
  2. Go to System Settings > FortiAnalyzer Fabric.
  3. Set Status to enabled.
  4. Configure the following settings for the supervisor, and then click Apply to save.
    RoleSelect Supervisor.
    Cluster NameType a name for the FortiAnalyzer Fabric.
    PasswordType a password for the FortiAnalyzer Fabric.
    Session PortDefault = 6443. Type the communication port if not using the default.
    Secure ConnectionEnable or disable secure connection.

To configure a member from the GUI:
  1. Confirm you are in the GUI for the FortiAnalyzer that will be a member.
  2. Go to System Settings > FortiAnalyzer Fabric.
  3. Configure the following settings for the member, and then click Apply to save.
    RoleSelect Member.
    Cluster NameType the name of the FortiAnalyzer Fabric.

    IP

    Type the IP of the supervisor for the FortiAnalyzer Fabric.

    PasswordType the password configured for the FortiAnalyzer Fabric.
    Session PortDefault = 6443. Type the communication port if not using the default.
    Secure ConnectionEnable or disable secure connection.

To view the FortiAnalyzer Fabric from the supervisor:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to System Settings > FortiAnalyzer Fabric.

    Once the supervisor and members are connected and synchronized, the Fabric Members table includes the following information for each FortiAnalyzer in the FortiAnalyzer Fabric:

    NameThe name of the FortiAnalyzer.
    RoleThe role of the FortiAnalyzer in the FortiAnalyzer Fabric (supervisor or member).

    IP

    The IP address of the FortiAnalyzer.

    StatusThe status of the FortiAnalyzer.

Viewing member devices from the FortiAnalyzer Fabric supervisor

To use the summary charts in Device Manager:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to Device Manager.

    Five summary charts are available:

    • Fabric Members
    • ADOMs
    • Device Types
    • Status
    • Critical Alerts

    By default, the Show Charts toggle is enabled. You can select which charts appear by selecting them in the Show Charts dropdown, or you can hide all the charts by disabling the Show Charts toggle.

  3. Hover your cursor over the charts to see more information about the data in a tooltip.

  4. Click an area on a chart or in its legend to filter Device Manager by that information.

    You can click multiple charts and legends to apply multiple filters. A filter icon appears next to the chart title when it is being used to filter the Device Manager.

  5. To remove the filters, click the title of the charts that were used.

To use the table in Device Manager:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to Device Manager.

    The table in the Device Manager provides the following information about each FortiAnalyzer Fabric member:

    NameThe name of the FortiAnalyzer Fabric member.
    PlatformThe device's platform.
  3. Click Expand All.

    FortiAnalyzer Fabric member ADOMs are displayed below each member. Each ADOM includes their authorized logging devices. The following information is displayed for each device and VDOM in the table:

    NameThe name of the device.
    IP AddressThe IP address of the device.
    PlatformThe platform of the device.
    Logs

    The real time log status.

    A green circle indicates that logs are being sent. A red circle indicates that logs are not being sent. The status indicator will turn from green to red when logs have not been sent for 15 minutes or longer.

    Average Log Rate (Logs/Sec)

    The average log rate per second. This information is only available when the device is sending logs in real time.

    Device Storage

    The amount of storage used by the device or VDOM.

FortiAnalyzer Fabric usability improvements

System Settings > FortiAnalyzer Fabric is a new GUI to easily setup a FortiAnalyzer Fabric Cluster.

The supervisor node provides a centralized view for the whole cluster. Card style summary dashboards are available in the supervisor's Device Manager, and filters can be applied to those summary dashboards.

This topic includes:

For more information about FortiAnalyzer Fabric, see the FortiAnalyzer Fabric Deployment Guide.

Configuring a FortiAnalyzer Fabric from the GUI

To configure a supervisor from the GUI:
  1. Confirm you are in the GUI for the FortiAnalyzer that will be the supervisor.
  2. Go to System Settings > FortiAnalyzer Fabric.
  3. Set Status to enabled.
  4. Configure the following settings for the supervisor, and then click Apply to save.
    RoleSelect Supervisor.
    Cluster NameType a name for the FortiAnalyzer Fabric.
    PasswordType a password for the FortiAnalyzer Fabric.
    Session PortDefault = 6443. Type the communication port if not using the default.
    Secure ConnectionEnable or disable secure connection.

To configure a member from the GUI:
  1. Confirm you are in the GUI for the FortiAnalyzer that will be a member.
  2. Go to System Settings > FortiAnalyzer Fabric.
  3. Configure the following settings for the member, and then click Apply to save.
    RoleSelect Member.
    Cluster NameType the name of the FortiAnalyzer Fabric.

    IP

    Type the IP of the supervisor for the FortiAnalyzer Fabric.

    PasswordType the password configured for the FortiAnalyzer Fabric.
    Session PortDefault = 6443. Type the communication port if not using the default.
    Secure ConnectionEnable or disable secure connection.

To view the FortiAnalyzer Fabric from the supervisor:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to System Settings > FortiAnalyzer Fabric.

    Once the supervisor and members are connected and synchronized, the Fabric Members table includes the following information for each FortiAnalyzer in the FortiAnalyzer Fabric:

    NameThe name of the FortiAnalyzer.
    RoleThe role of the FortiAnalyzer in the FortiAnalyzer Fabric (supervisor or member).

    IP

    The IP address of the FortiAnalyzer.

    StatusThe status of the FortiAnalyzer.

Viewing member devices from the FortiAnalyzer Fabric supervisor

To use the summary charts in Device Manager:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to Device Manager.

    Five summary charts are available:

    • Fabric Members
    • ADOMs
    • Device Types
    • Status
    • Critical Alerts

    By default, the Show Charts toggle is enabled. You can select which charts appear by selecting them in the Show Charts dropdown, or you can hide all the charts by disabling the Show Charts toggle.

  3. Hover your cursor over the charts to see more information about the data in a tooltip.

  4. Click an area on a chart or in its legend to filter Device Manager by that information.

    You can click multiple charts and legends to apply multiple filters. A filter icon appears next to the chart title when it is being used to filter the Device Manager.

  5. To remove the filters, click the title of the charts that were used.

To use the table in Device Manager:
  1. Confirm you are in the GUI for the FortiAnalyzer Fabric supervisor.
  2. Go to Device Manager.

    The table in the Device Manager provides the following information about each FortiAnalyzer Fabric member:

    NameThe name of the FortiAnalyzer Fabric member.
    PlatformThe device's platform.
  3. Click Expand All.

    FortiAnalyzer Fabric member ADOMs are displayed below each member. Each ADOM includes their authorized logging devices. The following information is displayed for each device and VDOM in the table:

    NameThe name of the device.
    IP AddressThe IP address of the device.
    PlatformThe platform of the device.
    Logs

    The real time log status.

    A green circle indicates that logs are being sent. A red circle indicates that logs are not being sent. The status indicator will turn from green to red when logs have not been sent for 15 minutes or longer.

    Average Log Rate (Logs/Sec)

    The average log rate per second. This information is only available when the device is sending logs in real time.

    Device Storage

    The amount of storage used by the device or VDOM.