F5 Dashboard

[OsamaFattoh]

Hello, is there a way to create F5 dashboards in FortiSIEM.
I want to show the hit count of each VIP of specific F5 device for example.
To be clear i want each dashboard to be specific to one F5 device.

[aebadi]

Hello,

Yes, this is definitely possible in FortiSIEM. Dashboards are driven by the event data coming from the device, so the first thing to check is that the F5 is actively sending logs to FortiSIEM and that those events are being received and parsed correctly.

Once you can see the F5 events in FortiSIEM, you can then build custom dashboards that are specific to an individual F5 device. For example, you can filter the data by a single F5 host and create widgets that show metrics like the hit count for each VIP.

In short, confirm the data is flowing first, and then you can customize dashboards per F5 device from there

[OsamaFattoh]

if the data is coming using syslog and SNMP protocols, is this enough? and then what are the steps to create this specific dashboard that is related to the hit count for each VIP?

[aebadi]

Yes, if data is coming in, you should be able to create the dashboard.

Once you have the traffic filtered in the Analytics tab, click the Actions menu in the top-left corner and select Save as Report.

After that, go to the Dashboard tab. Click the report-style icon, select the report you just created, and this will generate the dashboard for you.

Hope this helps