Skip to main content
mh_mw
mh_mw
New Member
November 7, 2017
Question

fortiview:destinations as hostnames

  • November 7, 2017
  • 1 reply
  • 7972 views

on fortigate fortiview destinations are viewed  as hostnames 

how can i do so on the fortianalyzer im only getting destinations by ips 

and im using 5.4 os on both 

    1 reply

    abelio
    SuperUser
    abelio
    SuperUser
    November 7, 2017

    Hi,

    right click in fortiview line you're interested in, and select "view related logs";

    that action will take to a logview with full  details for matched traffic

     

     

    hzhao_FTNT
    Staff
    hzhao_FTNT
    Staff
    November 7, 2017

    If you want to resolve ip to hostname in FortiView, please try CLI:

    config system fortiview setting

    set resolve-ip enable

    end

     

    regards,

    hz

     

     

    chall_FTNT
    Staff
    chall_FTNT
    Staff
    November 7, 2017

    If the destinations are showing on FGT as hostname & not FAZ, then you probably have the following setting on FGT (which only controls how info is displayed in the GUI): config log gui-display set resolve-host enable end

     

    It is most accurate to do the DNS resolution before the logs are generated.  That also ensures that neither FGT nor FAZ have to do any DNS resolution in the future (since it is recorded in the log).

     

    config log setting set resolve-ip enable

    end

    Terms & ConditionsAccessibility statement