Skip to main content
JoseOrosco
New Member
September 16, 2016
Question

Custom Report Services per policy

  • September 16, 2016
  • 5 replies
  • 8815 views

Hi,

 

I have been asked to list the services used per policy on our equipment.. I managed to create the following dataset.

 

select policyid, service, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log group by policyid, service having sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0))>0 order by bandwidth desc

 

However, for some reason, on the report i find policyids that do not exist on this specific equipment (I have more than one in my FAZ).

 

Please, any help would be much appreciated.

    5 replies

    hzhao_FTNT
    Staff
    Staff
    September 16, 2016

    Hi there, you have to add "where $filter" into dataset, $filter contains device and time filter info.

    JoseOrosco
    New Member
    September 16, 2016

    Hi,

     

    Thanks for the info, i changed it and now no more unknown policyids are on the report but i do see the Service column in blank..

     

    Is there any other code to take into account? I attach screensot

    hzhao_FTNT
    Staff
    Staff
    September 16, 2016

    So you are using FAZ 5.0? What's the FGT version? Can you see service field in log view and dataset test console?

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.