Introduction

Introduction

The FortiAnalyzer Fabric enables centralized viewing of devices, incidents, and events across multiple FortiAnalyzers acting as members. In this mode, FortiAnalyzer Fabric members form a Fabric with one device operating in supervisor mode as the root device. Incident and event information is synced from members to the supervisor using the API.

The FortiAnalyzer Fabric is ideal for use in high volume environments with many FortiAnalyzers. For more information about sizing and design considerations, see the FortiAnalyzer Architecture Guide.

The FortiAnalyzer Fabric device operating as the supervisor includes the following modules:

Device Manager	Displays FortiAnalyzer Fabric members with their ADOMs and authorized logging devices.
FortiView	Summarizes SOC information in FortiView and Monitors dashboards, which include widgets displaying log data in graphical formats, network security, WiFi security, and system performance in real-time. The information is generated from all FortiAnalyzer Fabric members.
Log View	Displays logs collected across the FortiAnalyzer Fabric. Each log includes the FortiAnalyzer Host Name and ADOM it was collected on.
Incidents & Events	Displays incidents and events created on the FortiAnalyzer Fabric members and supervisor local events.
Reports	Generate reports using information from all devices in the FortiAnalyzer Fabric. You can also configure report templates, schedules, and output profiles, and manage charts and datasets.
System Settings	Configure the settings for the FortiAnalyzer Fabric supervisor. For information about deploying the FortiAnalyzer Fabric, see Deployment. For information about creating Fabric Groups within the FortiAnalyzer Fabric, see Fabric Groups. For information about other settings, see the FortiAnalyzer Administration Guide.
Management Extensions	Enables supported management extension applications. See the FortiAnalyzer Administration Guide.

For information on the modules available as a FortiAnalyzer Fabric member, see the FortiAnalyzer Administration Guide.

Introduction

The FortiAnalyzer Fabric is ideal for use in high volume environments with many FortiAnalyzers. For more information about sizing and design considerations, see the FortiAnalyzer Architecture Guide.

The FortiAnalyzer Fabric device operating as the supervisor includes the following modules:

Device Manager

Displays FortiAnalyzer Fabric members with their ADOMs and authorized logging devices.

FortiView

Summarizes SOC information in FortiView and Monitors dashboards, which include widgets displaying log data in graphical formats, network security, WiFi security, and system performance in real-time.

The information is generated from all FortiAnalyzer Fabric members.

Log View

Displays logs collected across the FortiAnalyzer Fabric. Each log includes the FortiAnalyzer Host Name and ADOM it was collected on.

Incidents & Events

Displays incidents and events created on the FortiAnalyzer Fabric members and supervisor local events.

Reports

Generate reports using information from all devices in the FortiAnalyzer Fabric. You can also configure report templates, schedules, and output profiles, and manage charts and datasets.

System Settings

Configure the settings for the FortiAnalyzer Fabric supervisor.

For information about deploying the FortiAnalyzer Fabric, see Deployment.

For information about creating Fabric Groups within the FortiAnalyzer Fabric, see Fabric Groups.

For information about other settings, see the FortiAnalyzer Administration Guide.

Management Extensions

Enables supported management extension applications.

See the FortiAnalyzer Administration Guide.

For information on the modules available as a FortiAnalyzer Fabric member, see the FortiAnalyzer Administration Guide.

FortiAnalyzer Fabric Deployment Guide

Introduction

Introduction