FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
Nur
Staff
Staff
Article Id 242443
Description

This article describes how to troubleshoot empty tables in a predefined Web Usage report.

The report from FortiAnalyzer depends on the dataset and chat builder to make data able to generate and report be able to read.

The web usage report uses several datasets and chart builders to make data visible.

This article will focus on the below chart could not generate the data.

 

The chart could not generate the data:

 

  1. Top 20 Most Visited Categories.
  2. Top 50 Most Visited Sites.
  3. Top 10 Online Users.
  4. Top 10 Categories.
  5. Top 50 Sites By Browsing Time.
  6. Top 20 Categories By Bandwidth.
Scope

FortiAnalyzer.

Solution

To make the data visible from the report:

 

  1. Ensure the policy enables the web filter profile.

 

Nur_2-1673317622557.png

 

  1.  From the web filter profile used, ensure the FortiGuard category-based filter is enabled. The local categories action is enabled. By default, it is disabled.

 

Nur_1-1673317502011.png

 

  1. After enabling the local categories, from Log & Report -> Web Filter, ensure that the category description appears and has information.

 

Nur_6-1673317937765.png

 

  1. From FortiAnalyzer ensure to receive the same information as the FortiGate.

 

Nur_7-1673318073098.png

 

  1. Generate the web usage report from FortiAnalyzer and the data should exist from the report.

 

Note:

  • The important keyword for the table generate data is *categories*.
  • If the static URL has been used from the web filter profile, the categories will not appear in the report.
  • Ensure the FortiGuard category-based filters are Enabled.
  • Ensure FortiGate has a valid Web Filter License.
  • Restart the URL filter daemon of FortiGate may require:

 

diagnose test application urlfilter 99