FortiAnalyzer Email Alerts - Custom Queries

Forum|Forum|10 years ago
June 22, 2016
7 replies
10816 views

Hello,

For reference I am using FortiAnalyzer-VM64

Essentially, I have been able to create a custom query for the web filter log to retrieve counts of source IP addresses, and display the top 15 highest occurring results. From this dataset I was able to create automatic email alerts using the reporting system, however instead of a PDF attachment I would like the results from the query to be displayed as plain text in the email message.

Is there any way for me to get the results of my query to be raw text in an automatic email alert? When our mail server receives the email it automatically parses the message for the relevant information, however this is not possible if the message is a PDF attachment in a report format.

Thanks for your help

FortiAnalyzer VM

hzhao_FTNT

Staff

Hi there,

Unfortunately we do not offer plain text in email output

On FAZ 5.4, you can choose PDF/HTML/XML/CSV

On FAZ 5.2, you can choose PDF/HTML, the html report is in a zipped folder.

Regards,

hz

fmohAuthor

New Member

Thanks for the answer.

However, whenever I select HTML in the output profile, the email never gets sent. It only seems to work for PDF.

Is there a way to get the HTML file sent through email? As you suggested I would expect it as a zip attachment.

Thanks

hzhao_FTNT

Staff

The HTML report could be blocked by mail server because it contains some JS files, please check with your mail server admin and ask him to give you an exception.

regards,hz

rhap4boy

Visitor III

Hi fmoh,

How do you create a custom query for the web filter log to retrieve counts of source IP addresses and display the top 15 highest occurring results? I was wondering if you can share that query info? Thank you!