FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
vraev
Staff
Staff
Article Id 425385
Description

 

This article describes the steps to create a new output profile and assign it.

 

Scope

 

FortiAnalyzer, FortiManager with FortiAnalyzer feature enabled.

 

Solution

 

To create a new notification profile that will send reports to a specific SCP/SFTP/FTP server, navigate to Reports -> Advanced Settings -> Output Profile -> Create New.

 

Select the output format(s), then select Upload report to server to populate the required data.

 

FAZ_output_profile.png

 

To assign the profile to a report(s), go to Reports -> Report definitions -> All Reports -> Report_name {EDIT}.


Under the Settings tab, select Enable Notification and choose the profile name.

 

FAZ_output_profile_assign_under_report.png

 

 Troubleshooting:

 

To review the process of upload to the server use the provided example.

 

The initially used directory is '/Downloads'.

FAZ8HG-1 # diagnose debug application uploadd 255

FAZ8HG-1 # diagnose debug enable

FAZ8HG-1 # [T1521:upld_rpt_files.c:782] 1767368772 ERROR: upld_upload ret=-1 /Storage/Reports/ADOMs/root/2026_01_02/S-8_t8-Bandwidth-test-2026-01-02-1640+0100_d91ee359-1a4b-441b-ac35-68a3e7b6efe6_3519/Bandwidth-test-2026-01-02-1640+0100_3519.zip!
[T1521:upld_rpt_files.c:718] 1767368783 rpt q len=1.
[T1521:upld_rpt_files.c:136] 1767368783 get a rpt request: /Storage/Reports/ADOMs/root/2026_01_02/S-8_t8-Bandwidth-test-2026-01-02-1640+0100_d91ee359-1a4b-441b-ac35-68a3e7b6efe6_3519/Bandwidth-test-2026-01-02-1640+0100_3519.zip
[T1521:upld_utils.c:275] 1767368783 ERROR: upload /Storage/Reports/ADOMs/root/2026_01_02/S-8_t8-Bandwidth-test-2026-01-02-1640+0100_d91ee359-1a4b-441b-ac35-68a3e7b6efe6_3519/Bandwidth-test-2026-01-02-1640+0100_3519.zip to 
scp://10.5.49.73:22//Downloads/Bandwidth-test-2026-01-02-1640+0100_3519.zip failed due to Upload failed (at start/before it took off). <<<<<<<<<<<<<<< It was not accepted
[T1521:upld_utils.c:471] 1767368783 connecting to 10.5.49.73 (ssh)


The logs on the server side are as follows:

 

Jan 02 16:45:21 DebTest sshd-session[3187326]: Accepted password for user from 10.5.68.254 port 54246 ssh2
Jan 02 16:45:21 DebTest sshd-session[3187326]: pam_unix(sshd:session): session opened for user user(uid=1001) by user(uid=0)
Jan 02 16:45:21 DebTest sshd-session[3187326]: pam_unix(sshd:session): session closed for user user


Change the profile settings to '/home/user/Downloads/'.

FAZ8HG-1 # diagnose test application uploadd 99


Restart the service and run the report again.

 

FAZ8HG-1 # [T23880:upld_rpt_files.c:718] 1767369058 rpt q len=1.
[T23880:upld_rpt_files.c:136] 1767369058 get a rpt request: /Storage/Reports/ADOMs/root/2026_01_02/S-8_t8-Bandwidth-test-2026-01-02-1650+0100_d91ee359-1a4b-441b-ac35-68a3e7b6efe6_3521/Bandwidth-test-2026-01-02-1650+0100_3521.zip
[T23880:upld_utils.c:278] 1767369058 upload /Storage/Reports/ADOMs/root/2026_01_02/S-8_t8-Bandwidth-test-2026-01-02-1650+0100_d91ee359-1a4b-441b-ac35-68a3e7b6efe6_3521/Bandwidth-test-2026-01-02-1650+0100_3521.zip to
scp://10.5.49.73:22//home/user/Downloads/Bandwidth-test-2026-01-02-1650+0100_3521.zip succeeded. <<<<<<<<<<<<<<<< ok
[T23880:upld_rpt_files.c:199] 1767369058 Uploaded report file Bandwidth-test-2026-01-02-1650+0100_3521.zip successfully.

 

To stop the debug process:

 

FAZ8HG-1 # diagnose debug reset
FAZ8HG-1 # diagnose debug disable
Contributors