Created on 01-13-2025 07:23 AM Edited on 01-13-2025 07:56 AM By Jean-Philippe_P
Description
This article describes how to search and preview the hostname/FQDN in the LogView.
Scope
FortiAnalyzer.
Solution
When reviewing the hostname/FQDN, the FortiGate or FortiAnalyzer should resolve them.
To enable the proper settings, see the following article:
Technical Tip: Configuring FortiGate and FortiAnalyzer to resolve IPs to hostname
After these steps: under the LogView -> FortiGate -> Traffic, the column 'Destination Name' (dstname) should be enabled under 'More Columns' to display the resolved PTR records.
Then, use the search bar and a filter for 'destination name'.
Related article:
Technical Tip: API calls to search logs from analytics DB / LogView / in FortiAnalyzer