Required changes to dataset The following rules must be followed by any existing or new datasets: If your dataset references any IP related data, such as srcip or dstip, please use the ipstr(‘…’) function to convert an IP address for proper display. For example, ipstr(‘srcip’) returns the source IP in […]
Special characters in report name FortiAnalyzer version 5.4 does not support the following special characters in report’s name: \ / ‘ “ > < & , | # ? % $ + If you wish to import a report, please make sure the above special characters are not used. Otherwise, […]
Generate reports during the database rebuild After FortiAnalyzer is upgraded, the system may need to rebuild databases due to schema changes. Please note that the ability to generate accurate reports will be affected until the rebuild is complete.
Report grouping If you are running a large number of reports which are very similar, you can significantly improve report generation time by grouping the reports. Report grouping can reduce the number of hcache tables and improve auto-hcache completion time and report completion time. Step 1: Configure report grouping To […]
Firmware image checksums The MD5 checksums for all Fortinet software and firmware releases are available at the Customer Service & Support portal, https://support.fortinet.com. To verify the integrity of the download, select the Checksum link next to the HTTPS download link. A dialog box will be displayed with the image file […]
Downgrading to previous versions of firmware FortiAnalyzer does not provide a full downgrade path. You can downgrade to a previous firmware release via the GUI or CLI, but doing so results in configuration loss. A system reset is required after the firmware downgrading process has completed. To reset the system, […]
Extended UTM log for Application Control For FortiOS 5.0 devices, the application control log is not visible until you enable the extended UTM log in the FortiOS CLI. To enable extended UTM log, use the following CLI command: config application list edit [name here] set extended-utm-log enable end
SQL database rebuild FortiAnalyzer can receive new logs during SQL database rebuild. FortiView, Log View, Event Management, and Reports are also available.However, all scheduled reports are skipped. It is recommended to generate reports only after finishing the database rebuilding process.