Technical Tip: Inserting CAPWAP traffic into Analytics

[Gaetan_]

Description	This article describes how to make CAPWAP logs data part of FortiAnalyzer Analytics (reports, FortiView, etc...).
Scope	FortiAnalyzer.
Solution	By default, when FortiAnalyzer receives logs from FortiGate regarding CAPWAP tunnels, those are not inserted in Analytics. Thus, when generating a report or looking at FortiView graphs (Top Source or Destination, for example), those sessions aren't displayed. As CAWAP tunnels may consume an important part of the bandwidth (between a WiFi access point and a WiFi controller, for example), it can be useful to add the related logs data into Analytics. The solution is to disable CAPWAP exclusion 'set exclude-capwap disable' under 'config system report setting':