Only sent a report schedule via email when appear log on Forti-analyzer

Hello mua-cho-mat, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

 Fortinet Community Team 

Hello @mua-cho-mat!

I don't think you can condition the notification on the fact that the report has or hasn't data.

I believe, instead of working with reports you should work with Event Handlers. This function kinda turns FortiAnalyzer into a SIEM. You can set up  mail alerts based on the fact that FortiAnalyzer received or not some type of log.

you can read about it on:

https://docs2.fortinet.com/document/fortianalyzer/6.0.0/administration-guide/849421/event-handlers