Device Manager

Use the Device Manager pane to add, configure, and manage devices and VDOMs.

After you add and authorize a device or VDOM, the FortiAnalyzer unit starts collecting logs from that device or VDOM. You can configure the FortiAnalyzer unit to forward logs to another device. See Log Forwarding.

You can toggle between a Table View and Map View from the toolbar in Device Manager.

Table View:

Three donut charts display above the list of authorized devices:

• Status

• Disk Quota Usage

• Last Log Received Within

By default, the Show Charts toggle is enabled. You can select which charts appear by selecting them in the Show Charts dropdown, or you can hide all the charts by disabling the Show Charts toggle.

Mouse over the charts to see more information in a tooltip. Click a section of a chart to filter the charts and the table by that information. You can apply multiple filters across the charts. Once filtered, a filter icon appears next to the chart title; click the filter icon to remove the filter.

If you create a custom device group, it appears in the Device & Groups tree menu. Select the device group to display information about those devices.

The Device Manager table view includes the following default columns for authorized devices:

Column	Description
Device Name	Displays the name of the device.
IP Address	Displays the IP address for the device.
Platform	Displays the platform for the device.
HA Status	Displays information if the device is part of a High Availability cluster. You can manually identify devices as part of an HA cluster by editing the device information. See Editing device information.
Description	Displays a description of the device.
Firmware Version	Displays the firmware version of the device.
Serial Number	Displays the serial number of the device. The serial number is unique to the unit and does not change with firmware upgrades.
Last Log Time	Displays the date and time that the last log was received from the device.
Status	Displays the status of the device as Up or Down. The Up/Down state is based on the status of the OFTP connection (if OFTP is supported by the device) and/or the last log receiving time. For near realtime logging, the default log receiving threshold to determine if the device is Up or Down is 15 minutes. For scheduled uploading, the default is 6 hours. You can configure both of these settings in the config system log settings CLI: set log-interval-dev-no-logging <interger>: Set the interval in minutes of no logs received from a device before the device is considered Down. set log-upload-interval-dev-no-logging <interger>: Set the interval in minutes of no logs uploaded from a device before the device is considered Down.
Logging Mode	Displays the logging mode for the device. A lock icon displays when a secure tunnel is being used to transfer logs from the device to the FortiAnalyzer unit.
Average Log Rate (Logs/Sec)	Displays the average rate at which the device is sending logs to the FortiAnalyzer unit in log rate per second. Click the number to display a graph of historical average log rates.
Disk Quota Usage	Displays how much of the allotted disk storage space has been consumed by logs.

Map View:

The Map View provides an interactive map displaying the physical locations of authorized devices. You can navigate the map by using your mouse. Zoom in or out with the scroll wheel or with the plus (+) or minus (-) buttons on the map. When zoomed in, only the devices that are currently visible on the map are displayed in the sidebar. The sidebar provides information about the devices, including logging status, average log rate, and disk quota usage.