Skip to main content
daveywavey
daveywavey
New Member
January 22, 2016
Question

DNS QUERY Cookbook question

  • January 22, 2016
  • 5 replies
  • 7261 views

Hello I followed the link below and got it to work, my question is how can I see more results? I was able to expand the results to 500, is there a way to make it more than 500?

 

http://cookbook.fortinet.com/logging-dns-domain-lookups/

 

Thanks,

David

    5 replies

    awasfi_FTNT
    Staff
    awasfi_FTNT
    Staff
    January 25, 2016

    Hello,

     

    I believe you already added the dataset to a chart before using it on the report.

    So you can edit the chart used by this report and set "Show Top" to "0" to show all results.

     

    The device set by default to show 10,000 row per report:

    # config system report setting

    # get

    max-table-rows      : 10000 report-priority     : low week-start          : sun

     

    Regards,

    daveywavey
    daveywaveyAuthor
    New Member
    January 26, 2016

    Tried the above still shows only 500 results in the report.

    last result below.

     

    500 custom: DNS QUERY, dns_query=forum.fortinet.com; 14
    awasfi_FTNT
    Staff
    awasfi_FTNT
    Staff
    January 26, 2016

    It works for me on FortiAnalyzer v5.2.2.

    Not sure about FortiAnalyzer v4.3, I think You need to edit the chart and input the value under the section "Only Show First" in the Data Bindings.  You may try "0" or something like 50000.

    Terms & ConditionsAccessibility statement