Description
This article describes how to fix a possible cause behind the 'Top Source Addresses' and 'Top Destination Addresses' showing 'no record found' in FortiView, while the other sections do.
Scope
All supported versions of FortiAnalyzer and FortiGate.
Solution
These charts rely on the source and destination UUIDs in FortiGate traffic logs.
The option on the FortiGate is disabled by default, as the UUID strings are quite long and will increase the disk usage when enabled.
To enable UUID logging from the FortiGate, go to Log & Report -> Log Settings -> UUIDs in Traffic Log and enable the option.
The corresponding CLI configuration on FortiGate is as follows:
config system global
set log-uuid-address enable
end
In FortiOS 6.2.x and 6.4.x, extra configuration should be enabled from the GUI as follows:
config system global
set log-uuid-address enable
set log-uuid-policy enable <----- Regarding Policy UUID logs.
end
