Skip to main content
BartC
New Member
March 26, 2022
Question

Hostname in forticloud reports

  • March 26, 2022
  • 2 replies
  • 2306 views

Hey,

I'm running a #FG30E with OS 6.2.9 and export my data to Fortigate cloud. I use a lot theWebsites per source report. Now the source is represented by its IP address, but since this assigned via DHCP it can change over time. Can't I generate this report with hostname or devicename as source description iso IP address ? I looked in the reports templates, but there I can't find the fields I need.

Any suggestions ?

2 replies

Contributor
March 29, 2022

Hello BartC, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

  Fortinet Community Team 

kcheng
Staff & Editor
Staff & Editor
April 25, 2022

Hi BartC,


I understand that you would like to generate the report based on machine hostname instead of IP address as it changes over time since its DHCP allocation.

In order to accomplish the respective, you will need the following configured:
1. Enable Device Detection on the interface to which your machine is connecting to. For eg: internal LAN, DMZ and etc. (ref: https://kb.fortinet.com/kb/documentLink.do?externalID=FD52244)
2. Configure primary DNS to your internal DNS (ref: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/752486/dns-domain-list)
3. Configure the following in FortiGate CLI:
--------------------------------------------
config log setting
set resolve-ip enable
end
--------------------------------------------
4. Enable traffic logging on the policy where you would like to capture information on. Go to Policy & Objects > IPv4 Policy. Edit the policies controlling the traffic you wish to log. Under Logging Options, select All Sessions.

 

Alteration of reports in FortiCloud would require a paid subscription license. Once you have the license, you can edit the report to include the source name in the summary report.