Technical Note: How to search event type column behavior in FortiSIEM Analytics
Description
This article describes how to utilize the new HTML5 Analytics page in terms of controlling the display for Event Type Column. In 5.0 the HTML5 interface shows only when options are ticked. There is an Event Name Column that is statically displayed that may confuse users. This article explains how to turn on and off the Event Type Column and how the display column has changed behavior.
Solution
In HTML 5 for FortiSIEM 5.0 the display fields will show 4 Columns by default:
This article describes how to utilize the new HTML5 Analytics page in terms of controlling the display for Event Type Column. In 5.0 the HTML5 interface shows only when options are ticked. There is an Event Name Column that is statically displayed that may confuse users. This article explains how to turn on and off the Event Type Column and how the display column has changed behavior.
Solution
In HTML 5 for FortiSIEM 5.0 the display fields will show 4 Columns by default:
-Event Received Time-Reporting Ip-Event Name-Raw Event Log
The Event Name column is permanently displayed. There is no way to disable this column at this time and will always display as part of the raw event display field.
To enable or disable Event Type column, click on the checkbox on named "Show Event Type". If "Event Type" under the display columns is removed then the "Show Event Type" Checkbox will be removed.
