Skip to main content
Boss2u
New Member
January 17, 2020
Question

No Data in FortiView

  • January 17, 2020
  • 2 replies
  • 14174 views

Hello,

I was having some issues with our FortiAnalyzer, so I spun up a new VM (Hyper-V) and started from scratch. Everything seems to be working, but I don't see any data in FortiView.

There is plenty of free space and I have been running the newly configured FortiAnalyzer for about 3 weeks now.

Do I need to purchase an additional license in order for this part to work/show data?

 

2 replies

skyhigh
New Member
January 17, 2020

No additional license is required for FortiView.  You might want to confirm that the FortiAnalyzer is receiving logs.  Check "Log Browse" for new logs.   Once the logs are received, they will be inserted into the SQL database (thereby generating "analytic" logs).   It is analytic logs which are displayed in Lop View & FortiView.

 

You mention that there is enough space -- also make sure the minimum requirements in terms of memory & CPU count have been allocated to the VM.

 

https://docs.fortinet.com/vm/hyper-v/fortianalyzer/6.2/fortianalyzer-vm-on-hyper-v/6.2.0/583600/minimum-system-requirements

 

i.e., Minimum of 8G RAM & 4 CPU cores.  More for higher log rates.

brazz_FTNT
Staff
Staff
January 17, 2020

Hello, 

 

Also what is the version of your FAZ ?

 

Thanks

 

 

Boss2u
Boss2uAuthor
New Member
January 17, 2020

v6.2.3-build12135 191218(GA)

Boss2u
Boss2uAuthor
New Member
January 17, 2020

I am receiving logs in LogView.

I have dedicated 8gigs of ram and 4 processors to the VM.

Everything in the SOC dashboard (Top Threats, Treat Map, Compromised HOSTS, etc...) show "no data".