FortiAnalyzer "No Data" in Chart Builder, despite lots of matched sessions in Log View

[AlexFerenX]

Hi!

I wish build a custom report on FortiAnalyzer (7.2.4) using Chart Builder (as per Technical Tip: How to build a custom report on FortiAnalyzer using Chart Builder).

However, as per screenshot, I see "No Data" in Preview.. Why?

Thanks, Fern

[Stephen_G]

Hello Fern,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Stephen_G]

Hello Fern,

This article may be relevant to your query: https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Chart-Builder-preview-returning-no-dat...

Let me know if you would like any further assistance.

Kind regards,

[AlexFerenX]

Can you elaborate on “… Chart Builder function in FortiAnalyzer only match the SQL query and filters against the first few pages/sections of Log View/Analytics Logs.”? (If I understand it the way I read it, it seems useless.)

[vraev]

Hi @AlexFerenX ,

Review if the following options are in use:

config log setting  <<<<<<<<< There are more options under this menu
set fwpolicy-implicit-log enable
set extended-log enable
end
config system global
set log-uuid-address enable
end

Please review the following articles:
https://community.fortinet.com/t5/FortiAnalyzer/Troubleshooting-Tip-FortiView-Top-Source-Addresses-a...

https://docs.fortinet.com/document/fortianalyzer/7.4.2/administration-guide/385104/report-guidance
https://docs.fortinet.com/document/fortianalyzer/7.4.2/administration-guide/531107/data-policy-and-a...

https://docs.fortinet.com/document/fortianalyzer/7.4.2/administration-guide/86926/enabling-auto-cach...

Please try the suggested changes and keep us posted.

Best,