Sandbox view
The Sandbox tab under View displays event logs grouped by “sandbox.” The display and information differ when FortiPortal is in Collector mode and FortiAnalyzer mode.
The follow figure shows an example of the Sandbox tab when FortiPortal is in Collector mode:
The follow figure shows an example of the Sandbox tab when FortiPortal is in FortiAnalyzer mode:
Use the Source or Destination tab to filter the view. The Log tab in Collector mode shows the logs unfiltered.
When you select one of the entries in the table, the sandbox view works like the attack view. The system displays the first set of filtering. For each of the remaining filters, a vertical left menu includes buttons to perform the next level of filtering.
The applied filters are listed across the display. Select the gray x button beside each to remove that filter.
If you select an individual log entry, the system displays the details of that entry.