Fortinet black logo

CLI Reference

log client-reputation-report

log client-reputation-report

Use these commands to control client-reputation log actions.

Syntax

To accept a host so that it has its own baselines

execute log client-reputation-report accept <policy-id> <host>

To clear all auto-profile data

execute log client-reputation-report clear

To ignore a host, removing it from the abnormal list

execute log client-reputation-report ignore <policy-id> <host>

To refresh the data of one option result

execute log client-reputation-report refresh <policy-id> <option> <action>

<option> is one of bandwidth, session, failconn, geo, or app

<action> is one of data, baseline, or data_baseline (both data and baseline)

To get baseline/average information of one option

execute log client-reputation-report result baseline <policy-id> <option>

<option> is one of bandwidth, session, or failconn

To get hourly data of a host visiting a country or using an application

execute log client-reputation-report result details {hourly | total} <policy-id> <option> <name> <host>

<option> is geo or app

<name> is the name of the country or application

To list abnormal hosts of one or all options

execute log client-reputation-report result list <policy-id> <option>

<option> is geo, app, or all

To list periodical data of one host of one option

execute log client-reputation-report result period <policy-id> <option> <host> <periods>

<option> is one of bandwidth, session, failconn, geo, or app

<periods> is number of periods to list

To list the top 10 abnormal hosts of one option

execute log client-reputation-report result top10 <policy-id> <option>

<option> is one of bandwidth, session, failconn, geo, or app

To run reports immediately

execute log client-reputation-report run <policy-id>

log client-reputation-report

Use these commands to control client-reputation log actions.

Syntax

To accept a host so that it has its own baselines

execute log client-reputation-report accept <policy-id> <host>

To clear all auto-profile data

execute log client-reputation-report clear

To ignore a host, removing it from the abnormal list

execute log client-reputation-report ignore <policy-id> <host>

To refresh the data of one option result

execute log client-reputation-report refresh <policy-id> <option> <action>

<option> is one of bandwidth, session, failconn, geo, or app

<action> is one of data, baseline, or data_baseline (both data and baseline)

To get baseline/average information of one option

execute log client-reputation-report result baseline <policy-id> <option>

<option> is one of bandwidth, session, or failconn

To get hourly data of a host visiting a country or using an application

execute log client-reputation-report result details {hourly | total} <policy-id> <option> <name> <host>

<option> is geo or app

<name> is the name of the country or application

To list abnormal hosts of one or all options

execute log client-reputation-report result list <policy-id> <option>

<option> is geo, app, or all

To list periodical data of one host of one option

execute log client-reputation-report result period <policy-id> <option> <host> <periods>

<option> is one of bandwidth, session, failconn, geo, or app

<periods> is number of periods to list

To list the top 10 abnormal hosts of one option

execute log client-reputation-report result top10 <policy-id> <option>

<option> is one of bandwidth, session, failconn, geo, or app

To run reports immediately

execute log client-reputation-report run <policy-id>