Use the FortiView interface to customize the view and visualizations within a dashboard to find the information you are looking for. The tools in the top menu bar allow you to change the time display, refresh the data, and customize the data source. You can also right-click a table in the dashboard to view drilldown information for an entry.
FortiOS 6.4.2 currently only supports filtering results on the FortiView Sessions dashboard.
The top menu bar contains the following settings:
- A time display dropdown to switch between current and historical data.
- A Refresh button to update the displayed data.
- A Settings dropdown to change the information shown on the dashboard.
Use the time display dropdown to select the time period to display on the current dashboard. Time display options vary depending on the dashboard and can include current information (now) and historical information (1 hour, 24 hours, and 7 days).
Disk logging or remote logging must be enabled to view historical information.
You can use a chart to create a custom time display by selecting the time range with your cursor.
The icon next to the time period identifies the data source (FortiGate Disk, FortiAnalyzer, or FortiGate Cloud). You can hover over the icon to see a description of the device.
Use the Settings menu to change the data source, sort by information, and visualization.
- Click the dropdown menu at the right side of the top menu bar, and select Settings.
- Configure the widget settings, and click OK.
The Data Source dropdown only appears when FortiGate is connected to another data source.
For information about widget settings, see Adding FortiView widgets
For dashboards with multiple widgets, you cannot access the settings dropdown when the widget is expanded to full screen. To change the settings, click the back button to return to the dashboard, and click the dropdown.
FortiView gathers information from a variety of data sources. If there are no log disk or remote logging configured, the data will be drawn from the FortiGate's session table, and the Time Period is set to Now.
Other data sources that can be configured are:
- FortiGates (disk)
- FortiGate Cloud
When Data Source is set to Best Available Device, FortiAnalyzer is selected when available, then FortiGate Cloud, and then FortiGate Disk.
Display types include table view, bubble charts, and country maps. Not all display types are supported by all dashboards.
Bubble charts allow you to sort information using the Compare By dropdown menu. The size of each bubble represents the related amount of data. You can place your cursor over a bubble to display a tool-tip with detailed information on that item, and click on a bubble to drilldown into greater detail.
Country maps display traffic activity as regions on a map. Hover over the highlighted region to view information about the entry. You can also compare data by Bytes, Sessions, Bandwidth, and Packets. Country maps are not available in all dashboards and widgets.
Table view displays traffic activity as a graph and a table. To remove the table, click close, at the top right corner of the graph. To view the graph, click Show Graph.
Hover over linked items in an entry to view additional information. Some information windows provide links to other areas of FortiOS such as the application signatures page.
To select the columns displayed in a table, hover over the header in the first column, and click the configure table icon.
Double-click or right-click an entry in a FortiView dashboard and select Drill Down to Details to view additional details about the selected traffic activity. Click the Back icon in the toolbar to return to the previous view.
You can group drilldown information into different drilldown views. For example, you can group the drilldown information in the Top FortiView Destinations dashboard by Sources, Applications, Threats, and Policies.
Double-click an entry to view the logs in Sessions view. Double-click a session to view the logs.
To view matching logs or download a log, click the Security tab in the Log Details .