FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
glebras_FTNT
Staff
Staff
Article Id 198284
Description
This article explains how to list or disconnect administrators currently connected to a FortiAnalyzer.

Solution
From GUI

To list the current administrators connected on the FortiAnalyzer, from the GUI in the System Information Widget click on the right button after "Current Administrators".

glebras_FD41123_tn_FD41123-1.jpg

To delete an active session, select the Administrator username and click on the "Delete" button.

glebras_FD41123_tn_FD41123-2.jpg

From CLI

Run the following command to display the list of currently logged Administrators on the FortiAnalyzer:
# diagnose system admin-session list
*** entry 0 ***
session_id: 11899 (seq: 0)
username: admin
admin template: admin
from: GUI(172.26.128.66) (type 1)
profile: Super_User (type 3)
adom: root
session length: 216 (seconds)
idle: 37 (seconds)

*** entry 1 ***
session_id: 59900 (seq: 0)
username: Test
admin template: Test
from: GUI(172.26.128.66) (type 1)
profile: Restricted_User (type 1)
adom: root
session length: 87 (seconds)
idle: 86 (seconds)

*** entry 2 ***
session_id: 41953 (seq: 1)
username: admin
admin template: admin
from: ssh(172.26.128.66) (type 0)
profile: Super_User (type 3)
adom: root
session length: 18 (seconds)

Run the following command to delete a currently logged Administrator on the FortiAnalyzer:
# diagnose system admin-session kill <session_id>

Contributors