Hi,
I have been asked to list the services used per policy on our equipment.. I managed to create the following dataset.
select policyid, service, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log group by policyid, service having sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0))>0 order by bandwidth desc
However, for some reason, on the report i find policyids that do not exist on this specific equipment (I have more than one in my FAZ).
Please, any help would be much appreciated.
Hi there, you have to add "where $filter" into dataset, $filter contains device and time filter info.
So you are using FAZ 5.0? What's the FGT version? Can you see service field in log view and dataset test console?
Hi,
For some strange reason it worked fine but on another equipment, it seems this one is not saving the service column properly.
Thanks for the advice on the dataset.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1737 | |
1108 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.