Skip to main content
psalian
Staff & Editor
Staff & Editor
December 1, 2016

Technical Tip: FortiAnalyzer query to check interface status

  • December 1, 2016
  • 0 replies
  • 1704 views

Description

 
This article provides the query to check the interface status of the associated FortiGates.
 
Scope
 
FortiAnalyzer.


Solution

 

Under Reports -> Datasets, create a new dataset.

Query:
 
select msg as description, status, from_itime(itime) as f_itime from $log where $filter and msg like '%<interface_name>%' order by f_itime
 
Interface names that will be monitored can be entered into the query as follows: for example, 'wan1' and 'wan2':
 
select msg as description, status, from_itime(itime) as f_itime from $log where $filter and (msg like '%wan1%' or msg like '%wan2%') order by f_itime;

Select the Log Type as Event, create a new chart from the chart library, select the dataset, create a new report, and use this chart in it.