Fortinet black logo

Administration Guide

Device Manager

Device Manager

Use the Device Manager pane to add, configure, and manage devices and VDOMs.

After you add and authorize a device or VDOM, the FortiAnalyzer unit starts collecting logs from that device or VDOM. You can configure the FortiAnalyzer unit to forward logs to another device. See Log Forwarding.

You can toggle between a Table View and Map View from the toolbar in Device Manager.

Table View:

Three donut charts display above the list of authorized devices:

  • Log Status

  • Logging Mode

  • Log Encryption

By default, the Show Charts toggle is enabled. You can select which charts appear by selecting them in the Show Charts dropdown, or you can hide all the charts by disabling the Show Charts toggle.

Mouse over the charts to see more information in a tooltip. Click a section of a chart to filter the charts and the table by that information. You can apply multiple filters across the charts. Once filtered, a filter icon appears next to the chart title; click the filter icon to remove the filter.

If you create a custom device group, it appears in the Device & Groups tree menu. Select the device group to display information about those devices.

The Device Manager table view includes the following default columns for authorized devices:

Column

Description

Device Name

Displays the name of the device.

Serial Number

Displays the serial number of the device. The serial number is unique to the unit and does not change with firmware upgrades.

Platform

Displays the platform for the device.

Firmware Version

Displays the firmware version of the device.

IP Address

Displays the IP address for the device.

Logs

Identifies whether the device is successfully sending logs to the FortiAnalyzer unit. A green circle indicates that logs are being sent. A red circle indicates that logs are not being sent. The status indicator will turn from green to red when logs have not been sent for 15 minutes or longer.

A lock icon displays when a secure tunnel is being used to transfer logs from the device to the FortiAnalyzer unit.

Average Log Rate
(Logs/Sec)

Displays the average rate at which the device is sending logs to the FortiAnalyzer unit in log rate per second. Click the number to display a graph of historical average log rates.

Device Storage

Displays how much of the allotted disk space has been consumed by logs.

HA Status

Displays information if the device is part of a High Availability cluster. You can manually identify devices as part of an HA cluster by editing the device information. See Editing device information.

Description

Displays a description of the device.

Map View:

The Map View provides an interactive map displaying the physical locations of authorized devices. You can navigate the map by using your mouse. Zoom in or out with the scroll wheel or with the plus (+) or minus (-) buttons on the map. When zoomed in, only the devices that are currently visible on the map are displayed in the sidebar. The sidebar provides information about the devices, including logging status, average log rate, and device storage.

Device Manager

Use the Device Manager pane to add, configure, and manage devices and VDOMs.

After you add and authorize a device or VDOM, the FortiAnalyzer unit starts collecting logs from that device or VDOM. You can configure the FortiAnalyzer unit to forward logs to another device. See Log Forwarding.

You can toggle between a Table View and Map View from the toolbar in Device Manager.

Table View:

Three donut charts display above the list of authorized devices:

  • Log Status

  • Logging Mode

  • Log Encryption

By default, the Show Charts toggle is enabled. You can select which charts appear by selecting them in the Show Charts dropdown, or you can hide all the charts by disabling the Show Charts toggle.

Mouse over the charts to see more information in a tooltip. Click a section of a chart to filter the charts and the table by that information. You can apply multiple filters across the charts. Once filtered, a filter icon appears next to the chart title; click the filter icon to remove the filter.

If you create a custom device group, it appears in the Device & Groups tree menu. Select the device group to display information about those devices.

The Device Manager table view includes the following default columns for authorized devices:

Column

Description

Device Name

Displays the name of the device.

Serial Number

Displays the serial number of the device. The serial number is unique to the unit and does not change with firmware upgrades.

Platform

Displays the platform for the device.

Firmware Version

Displays the firmware version of the device.

IP Address

Displays the IP address for the device.

Logs

Identifies whether the device is successfully sending logs to the FortiAnalyzer unit. A green circle indicates that logs are being sent. A red circle indicates that logs are not being sent. The status indicator will turn from green to red when logs have not been sent for 15 minutes or longer.

A lock icon displays when a secure tunnel is being used to transfer logs from the device to the FortiAnalyzer unit.

Average Log Rate
(Logs/Sec)

Displays the average rate at which the device is sending logs to the FortiAnalyzer unit in log rate per second. Click the number to display a graph of historical average log rates.

Device Storage

Displays how much of the allotted disk space has been consumed by logs.

HA Status

Displays information if the device is part of a High Availability cluster. You can manually identify devices as part of an HA cluster by editing the device information. See Editing device information.

Description

Displays a description of the device.

Map View:

The Map View provides an interactive map displaying the physical locations of authorized devices. You can navigate the map by using your mouse. Zoom in or out with the scroll wheel or with the plus (+) or minus (-) buttons on the map. When zoomed in, only the devices that are currently visible on the map are displayed in the sidebar. The sidebar provides information about the devices, including logging status, average log rate, and device storage.