Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mua-cho-mat
New Contributor

Only sent a report schedule via email when appear log on Forti-analyzer

Hi all, 

I have created a schedule report daily on Forti-Analyzer and sent to email. I want to only sent email when appear log, if no log appear then don't sent email

Anyone have idea? Thanks

2 REPLIES 2
Anonymous
Not applicable

Hello mua-cho-mat, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

 Fortinet Community Team 

tio3udes
New Contributor III

Hello mua-cho-mat!

 

I don't think you can condition the notification on the fact that the report has or hasn't data.

 

I believe, instead of working with reports you should work with Event Handlers. This function kinda turns FortiAnalyzer into a SIEM. You can set up  mail alerts based on the fact that FortiAnalyzer received or not some type of log.

 

you can read about it on:

 

https://docs2.fortinet.com/document/fortianalyzer/6.0.0/administration-guide/849421/event-handlers

 

 

ti03udes
ti03udes
Labels
Top Kudoed Authors