Fortinet black logo

Administration Guide

Filters

Copy Link
Copy Doc ID dc02a854-ab11-11ea-8b7d-00505692583a:851535
Download PDF

Filters

Views that allow filtering have additional fields displayed in a panel at the top of the screen. Filter fields are added one at a time from a list of possible pieces of data. Typically this is a list of the column titles that are displayed in the View. Possible fields vary depending on the View being accessed.

The Filter section can be opened or closed using the + and: symbols in the title bar. Wild card characters can be used in text based fields.

Using filters

  1. Navigate to a view that has a filter panel at the top.
  2. Click in the Add Filter field and select a data type to use as a filter, such as Host Name.
  3. A field is displayed for the data to be used as a filter. In the example shown above, *PC is entered as filter for Host Name. Enter the appropriate filter data.
  4. Continue adding filter fields and filter data as needed.
  5. Click Update to display the filtered data in the table.
  6. To remove a filter, click the - symbol next to the field. Click Update to refresh the data in the table.

Filter types

Each view that has filters has options that are specific to that particular view. For example, Guest Contractor Accounts allows you to filter by account type. However, there are some filter options that are common to any views. The table below lists filters that are common across many views. Detailed filter information is available in the Help for each individual view.

Type

Definition

Time

Filters that involve date and time:

  • Last: Searches for timestamps within the last X number of minutes, hours or days by counting backwards from the current date and time.
  • Between: Searches for timestamps between the Start and End time - entered in YYYY/MM/DD hh:mm AM/PM format.
  • Month: Searches for timestamps between the month's start and end dates. For example, if March is selected, the filter searches for timestamps between 03/01/2015 00:00:00 and 03/31/2015 23:59:59.
  • After: Searches for timestamps after the Start time entered in YYYY/MM/DD hh:mm AM/PM format.
  • Before: Searches for timestamps before the Start time entered in YYYY/MM/DD hh:mm AM/PM format.

Use Calendar to select a date.

Enabled

  • Enabled: Record is enabled, such as a guest account.
  • Disabled: Record is disabled, such as a guest account.

Host Type

  • Registered: Search includes only registered hosts or devices.
  • Rogue: Search includes only rogue or unregistered hosts or devices.

Authentication Type

  • Local: Validates the user to a database on the local FortiNAC appliance.
  • LDAP: Validates the user to a directory database. FortiNAC uses the LDAP protocol to communicate to an organization’s directory.
  • RADIUS: Validates the user to a RADIUS server.

IP address

IP address of the connecting host or device.

Physical Address

MAC address of the connecting host or device.

Location

Name of the device and port where the host or device connected.

Group

Name of the group containing that contains devices, ports, users or hosts.

Container

Name of the Container in which a device is a member.

Registered

Shows Registered and Unregistered Hosts

Wild cards

When searching using a text field you must enter specific search data, such as 192.168.10.5. Wild cards can be used in these fields. Possible wild cards include the following:

Option

Example

*

192.* in the IP address field searches for all IP addresses that begin with 192.

[...]

[192.168.10.10,172.168.5.22,192.168.5.10] Searches for each IP address in the series and returns multiple records.

Any search field that starts and ends with square brackets "[]" and has one or more commas "," is treated as a list of values.

!

!192. in the IP address field searches for all IP addresses that do not contain 192.

![...]

![John, Frank, Bob] in the First Name field returns all records that do not contain John, Frank or Bob in the First Name field.

![...]

![Windows] in the operating system field returns all records that do not contain Windows in the operating system field.

<esc>!

<esc>!John in the First Name field returns records that match !John. The "<esc>" allows you to search for data that contains an exclamation point (!).

<esc>!

<esc>!Windows in the operating system field returns records that match !Windows. The "<esc>" allows you to search for data that contains an exclamation point (!).

Filters

Views that allow filtering have additional fields displayed in a panel at the top of the screen. Filter fields are added one at a time from a list of possible pieces of data. Typically this is a list of the column titles that are displayed in the View. Possible fields vary depending on the View being accessed.

The Filter section can be opened or closed using the + and: symbols in the title bar. Wild card characters can be used in text based fields.

Using filters

  1. Navigate to a view that has a filter panel at the top.
  2. Click in the Add Filter field and select a data type to use as a filter, such as Host Name.
  3. A field is displayed for the data to be used as a filter. In the example shown above, *PC is entered as filter for Host Name. Enter the appropriate filter data.
  4. Continue adding filter fields and filter data as needed.
  5. Click Update to display the filtered data in the table.
  6. To remove a filter, click the - symbol next to the field. Click Update to refresh the data in the table.

Filter types

Each view that has filters has options that are specific to that particular view. For example, Guest Contractor Accounts allows you to filter by account type. However, there are some filter options that are common to any views. The table below lists filters that are common across many views. Detailed filter information is available in the Help for each individual view.

Type

Definition

Time

Filters that involve date and time:

  • Last: Searches for timestamps within the last X number of minutes, hours or days by counting backwards from the current date and time.
  • Between: Searches for timestamps between the Start and End time - entered in YYYY/MM/DD hh:mm AM/PM format.
  • Month: Searches for timestamps between the month's start and end dates. For example, if March is selected, the filter searches for timestamps between 03/01/2015 00:00:00 and 03/31/2015 23:59:59.
  • After: Searches for timestamps after the Start time entered in YYYY/MM/DD hh:mm AM/PM format.
  • Before: Searches for timestamps before the Start time entered in YYYY/MM/DD hh:mm AM/PM format.

Use Calendar to select a date.

Enabled

  • Enabled: Record is enabled, such as a guest account.
  • Disabled: Record is disabled, such as a guest account.

Host Type

  • Registered: Search includes only registered hosts or devices.
  • Rogue: Search includes only rogue or unregistered hosts or devices.

Authentication Type

  • Local: Validates the user to a database on the local FortiNAC appliance.
  • LDAP: Validates the user to a directory database. FortiNAC uses the LDAP protocol to communicate to an organization’s directory.
  • RADIUS: Validates the user to a RADIUS server.

IP address

IP address of the connecting host or device.

Physical Address

MAC address of the connecting host or device.

Location

Name of the device and port where the host or device connected.

Group

Name of the group containing that contains devices, ports, users or hosts.

Container

Name of the Container in which a device is a member.

Registered

Shows Registered and Unregistered Hosts

Wild cards

When searching using a text field you must enter specific search data, such as 192.168.10.5. Wild cards can be used in these fields. Possible wild cards include the following:

Option

Example

*

192.* in the IP address field searches for all IP addresses that begin with 192.

[...]

[192.168.10.10,172.168.5.22,192.168.5.10] Searches for each IP address in the series and returns multiple records.

Any search field that starts and ends with square brackets "[]" and has one or more commas "," is treated as a list of values.

!

!192. in the IP address field searches for all IP addresses that do not contain 192.

![...]

![John, Frank, Bob] in the First Name field returns all records that do not contain John, Frank or Bob in the First Name field.

![...]

![Windows] in the operating system field returns all records that do not contain Windows in the operating system field.

<esc>!

<esc>!John in the First Name field returns records that match !John. The "<esc>" allows you to search for data that contains an exclamation point (!).

<esc>!

<esc>!Windows in the operating system field returns records that match !Windows. The "<esc>" allows you to search for data that contains an exclamation point (!).