Description
This article describes how to identify SQL queries from FortiView.
Scope
FortiAnalyzer.
Solution
FortiAnalyzer FortiView provides multiple default option to analyze data in a structured table and graph across a period. In most cases, these results are utilized by users to identify the activity in the production environment.
Periodically, FortiView may experience malfunctions, for example:
- Not generating results/No data displayed.
- Results from the report dataset are different from FortiView.
In this case, users can apply the debug common below to understand the FortiView SQL query to fetch data from the Log View Analytics log:
diagnose sql debug sqlqry dbgon 5
diagnose sql debug sqlqry show
After running the debug above, users need to go to FortiView and trigger the query on any of the option views.
The output examples are shown below:
The output of the query will be overwhelming to identify the issues. It is recommended to find the green highlighted word 'SQL query', copy the whole query, paste it into the SQL format available online, and format the SQL query to a readable format.
