FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
Article Id 192516


This article describes how to set the maximum number of rows in a FortiAnalyzer report table to 100,000. The default number of rows for a chart of type table is limited to 10,000 rows only by design. Hence any table exceeding this limit would not display the logs beyond 10,000 rows.



The report rows limit in FortiAnalyzer is 100,000 rows. Set this limit under the report settings using the following commands:
config system report setting
    set max-table-rows 100000 --> Maximum number of rows that can be generated in a single table (Input integer value (10000-10000000)).


After setting the limit on the CLI also set the limit in the chart in the data binding section.

It should be noted that by setting the limit to 100,000 there may be a significant impact on the time taken for report generation. This will apply particularly on low-end devices like the FAZ-200F where a large latency will be experienced while generating the report with 10,000+ records.