Report guidance

You can use the Report Guidance feature to determine if FortiAnalyzer has the appropriate Analytics logs available for a report.

If Analytics logs are not available for a chart or macro used in the report, it will display No Data in the report output. For example, the Analytics logs may not be available if;

• logging is not enabled correctly on the device,

• the log requires a FortiGuard license and you do not have one,

• or there are no matching logs at that time.

To use Report Guidance:

1. Go to Reports > Report Definitions > All Reports.
2. Click the icon in the Config Recommendation column for the report.

   The Report Guidance pane dispays for that report. The information in the Report Guidance pane is organized by Item Title (chart or macro name), Device Type, and Log Type. Tehe pane indicates the relevant Log Fields and if the Analytics logs are available.

   See below for a partial example from Report Guidance for the 360-Degree Security Review report:

   Item Title: 360 Degree Application Visibility and Control

   Device Type: FortiGate

   Log Type: app-ctrl

   Log Fields: app, appcat

   Analytics logs available: Yes

   --------------------------------------------------------

   Item Title: 360 Degree Threats Detection and Prevention

   Device Type: FortiGate

   Log Type: app-ctrl

   Log Fields: app, appcat

   Analytics logs available: Yes

   -----------------------------

   Device Type: FortiGate

   Log Type: attack

   Log Fields: attack, severity

   Analytics logs available: Yes