Skip to main content
Rajakumaran
New Member
March 28, 2024
Question

I want to customize the FortiAnalyzer report

  • March 28, 2024
  • 1 reply
  • 1956 views

We are planning to implement Dynamic IP pools for IoT users, where the same IP address may be assigned to different users at different times. In the FortiAnalyzer report for Top Applications Bandwidth by user drilldown, we want the report to generate double entries with timestamps for an IP address if it is assigned to both User 1 and User 2, and they use the same applications. To achieve this requirement, we need to modify the FortiAnalyzer report dataset's SQL query. Can anybody provide any inputs on this?

 

Note: The dynamic IP pools will be implemented on another firewall that is not directly connected to the FortiAnalyzer. However, our firewall is directly connected to FortiAnalyzer, and it receives IoT device traffic through an IPsec tunnel with users Source IP.

1 reply

AEK
SuperUser
SuperUser
March 28, 2024

This is actually my problem with FortiAnalyzer, especially with such shockingly log queries, as the last time I used SQL was about 20 years ago. If you are not used with SQL then you will probably need the support of a DBA.

AEK
Rajakumaran
New Member
March 28, 2024

How can i  contact them?

AEK
SuperUser
SuperUser
March 28, 2024

If you have one DB admin in your company that would be great, otherwise you will need to learn a bit of SQL.

AEK