FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
mbenvenuti
Staff
Staff
Article Id 379598
Description This article describes how to run reports in FortiSIEM.
Scope FortiSIEM.
Solution

Follow the below steps to run reports:

  • Go to Resources -> Report and select the desired report group from the Reports folder.
  • Select the report(s) from the table.
  • Select Run to run the report(s) immediately, or select More and select Schedule to schedule the report.
  • If a multi-tenant deployment has been set, select the Organization for the report that needs to be run.
  • Select one of the Report Time Range options:
    • Relative: Select the last number of hours from which the report has to be generated.
    • Absolute: Select the range of start and end dates and times.
  • Select OK.

The report will run and the results will be displayed.

 

If the schedule is not working, then check the logs with the command from super CLI as root:

 

tail -f /opt/glassfish/domains/domain1/logs/phoenix.log

 

Run the report manually for the same time period of schedule and check for logs.

 

If the requirement is to get the report even if it is empty then uncheck the box from Admin -> Settings -> Scheduled Report -> Do not send scheduled emails if the report is empty.