Fortinet black logo

Administration Guide

Report guidance

Report guidance

You can use the Report Guidance feature to determine if FortiAnalyzer has the appropriate Analytics logs available for a report.

If Analytics logs are not available for a chart or macro used in the report, it will display No Data in the report output. For example, the Analytics logs may not be available if;

  • logging is not enabled correctly on the device,

  • the log requires a FortiGuard license and you do not have one,

  • or there are no matching logs at that time.

To use Report Guidance:
  1. Go to Reports > Report Definitions > All Reports.
  2. Click the icon in the Config Recommendation column for the report.

    The Report Guidance pane dispays for that report. The information in the Report Guidance pane is organized by Item Title (chart or macro name), Device Type, and Log Type. Tehe pane indicates the relevant Log Fields and if the Analytics logs are available.

    See below for a partial example from Report Guidance for the 360-Degree Security Review report:

    Item Title: 360 Degree Application Visibility and Control

    Device Type: FortiGate

    Log Type: app-ctrl

    Log Fields: app, appcat

    Analytics logs available: Yes

    --------------------------------------------------------

    Item Title: 360 Degree Threats Detection and Prevention

    Device Type: FortiGate

    Log Type: app-ctrl

    Log Fields: app, appcat

    Analytics logs available: Yes

    -----------------------------

    Device Type: FortiGate

    Log Type: attack

    Log Fields: attack, severity

    Analytics logs available: Yes

Report guidance

You can use the Report Guidance feature to determine if FortiAnalyzer has the appropriate Analytics logs available for a report.

If Analytics logs are not available for a chart or macro used in the report, it will display No Data in the report output. For example, the Analytics logs may not be available if;

  • logging is not enabled correctly on the device,

  • the log requires a FortiGuard license and you do not have one,

  • or there are no matching logs at that time.

To use Report Guidance:
  1. Go to Reports > Report Definitions > All Reports.
  2. Click the icon in the Config Recommendation column for the report.

    The Report Guidance pane dispays for that report. The information in the Report Guidance pane is organized by Item Title (chart or macro name), Device Type, and Log Type. Tehe pane indicates the relevant Log Fields and if the Analytics logs are available.

    See below for a partial example from Report Guidance for the 360-Degree Security Review report:

    Item Title: 360 Degree Application Visibility and Control

    Device Type: FortiGate

    Log Type: app-ctrl

    Log Fields: app, appcat

    Analytics logs available: Yes

    --------------------------------------------------------

    Item Title: 360 Degree Threats Detection and Prevention

    Device Type: FortiGate

    Log Type: app-ctrl

    Log Fields: app, appcat

    Analytics logs available: Yes

    -----------------------------

    Device Type: FortiGate

    Log Type: attack

    Log Fields: attack, severity

    Analytics logs available: Yes