F5 Dashboard

Hello,

Yes, this is definitely possible in FortiSIEM. Dashboards are driven by the event data coming from the device, so the first thing to check is that the F5 is actively sending logs to FortiSIEM and that those events are being received and parsed correctly.

Once you can see the F5 events in FortiSIEM, you can then build custom dashboards that are specific to an individual F5 device. For example, you can filter the data by a single F5 host and create widgets that show metrics like the hit count for each VIP.

In short, confirm the data is flowing first, and then you can customize dashboards per F5 device from there

Yes, if data is coming in, you should be able to create the dashboard.

Once you have the traffic filtered in the Analytics tab, click the Actions menu in the top-left corner and select Save as Report.

After that, go to the Dashboard tab. Click the report-style icon, select the report you just created, and this will generate the dashboard for you.

Hope this helps 

If you’ve already confirmed that your F5 is sending logs and FortiSIEM is parsing them correctly, the quickest way to get that dashboard going is to start in the Analytics tab.

Run a query filtered for your F5 device, and once you have the data looking the way you want, just hit the Actions menu and 'Save as Report.' From there, you can jump over to the Dashboard tab, click the widget icon to add a new one, and select that report as your data source. It’s a lot more flexible than the defaults if you're trying to track specific metrics like VIP hit counts!