FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
nmarx
Staff
Staff
Description
This article explains how to edit chart settings in order to display more lines of output per chart. 
Most of the predefined charts for use in FortiAnalyzer reports are configured to provide the top 10, 25 or 50 matches.



Scope


Solution
A predefined chart cannot be edited. Instead it needs to be cloned.
 
  -  Go to Reports > Chart Library.

  -  Right-click on the chart that needs to be modified and click on Clone.

  -  Under Data Bindings ensure that the value (Only Show First or Show Top (0 for all results)) is changed

v5.2

Newchart.png

v5.4


  -  In the report template replace the original chart with the clone

Note: By default a chart can output as many as 100000 lines of results. However, the higher the number of lines of output, the more resources the FortiAnalyzer/FortiManager requires to complete the SQL query and the report.

Contributors