Fortinet black logo

New Features

Add time frame selector to log viewer pages 7.2.1

Copy Link
Copy Doc ID 77966226-6996-11ec-bdf2-fa163e15d75b:378339
Download PDF

Add time frame selector to log viewer pages 7.2.1

Logs can be filtered by date and time in the Log & Report > System Events and Security Events pages. The log viewer can be filtered with a custom range or with specific time frames.

The time frame available is dependent on the source:

  • Logs sourced from FortiAnalyzer, FortiGate Cloud, and FortiAnalyzer Cloud have the same time frame options as FortiView (5 minutes, 1 hour, 24 hours, or 7 days).

  • Logs sourced from the Disk have the time frame options of 5 minutes, 1 hour, 24 hours, 7 days, or None.

  • Logs source from Memory do not have time frame filters.

A custom time frame can be applied using the Date/Time filter. If the Date/Time filter is applied, the time frame will be disabled and set to custom.

To set a custom time frame range:
  1. Go to Log & Report > Security Events.

  2. Select the Logs tab.

  3. Select the Date/Time filter. The Filter dialog is displayed.

  4. Select Range.

  5. Click the From calendar icon and select a date.

  6. Enter a time in the From field using the form HH:MM:SS.

  7. Click the To calendar icon and select a date.

  8. Enter a time in the To time using the form HH:MM:SS.

  9. Click Apply. The logs that match the set time frame are displayed and the time frame is set to custom.

Note

If a custom time frame filter is set, a new time frame cannot be selected until the first filter is removed. Click the X in the search bar or select Remove in the Filter dialog to remove the filter.

Add time frame selector to log viewer pages 7.2.1

Logs can be filtered by date and time in the Log & Report > System Events and Security Events pages. The log viewer can be filtered with a custom range or with specific time frames.

The time frame available is dependent on the source:

  • Logs sourced from FortiAnalyzer, FortiGate Cloud, and FortiAnalyzer Cloud have the same time frame options as FortiView (5 minutes, 1 hour, 24 hours, or 7 days).

  • Logs sourced from the Disk have the time frame options of 5 minutes, 1 hour, 24 hours, 7 days, or None.

  • Logs source from Memory do not have time frame filters.

A custom time frame can be applied using the Date/Time filter. If the Date/Time filter is applied, the time frame will be disabled and set to custom.

To set a custom time frame range:
  1. Go to Log & Report > Security Events.

  2. Select the Logs tab.

  3. Select the Date/Time filter. The Filter dialog is displayed.

  4. Select Range.

  5. Click the From calendar icon and select a date.

  6. Enter a time in the From field using the form HH:MM:SS.

  7. Click the To calendar icon and select a date.

  8. Enter a time in the To time using the form HH:MM:SS.

  9. Click Apply. The logs that match the set time frame are displayed and the time frame is set to custom.

Note

If a custom time frame filter is set, a new time frame cannot be selected until the first filter is removed. Click the X in the search bar or select Remove in the Filter dialog to remove the filter.