FortiView only shows now

[kinmun]

i noticed that my Fortiview only shows data for now.

there is no data in 5 mins, 1 hour and 24 hours.

what is the settings I need to configure ?

i have analyzer installed as well.

logs is configured to store & upload to analyzer daily at 23:59.

[YtseJam · Accepted solution]

I think you should stick with realtime settings then if you want to monitor your logs just go with your analyzer. Since you have FortiAnalyzer, let it manage the reports then for your fortigate box, let it do the firewalling. Just a suggestion. 

Regards,

Jam

[Irfan_Pathan · Accepted solution]

Hi, Upgrade your firmware to v5.2.3 See attached screenshot.

-Irfan Pathan

[kinmun]

only the All Sessions in Fortiview have information to show.

the rest like Applications only have now logs to show.

is this normal ?

[YtseJam]

Hi,

Kindly check your log settings, I think your settings was in "realtime" that's why it shows only "now". Or change your "Display logs from" to FortiAnalyzer under Log & Report>Log Config>Log Settings. 

[kinmun]

realtime is not selected.

have since changed to display from analyzer. it was set to disk previously.

[YtseJam]

After changing, is it still the same as before?

[kinmun]

realtime is not selected.

have since changed to display from analyzer. it was set to disk previously.

[kinmun]

yes, still the same. sources, applications, destinations shows nothing in 5 min, 1 hour n 24 hours.

only All sessions is showing.

is this normal ?

[YtseJam]

Can you try to change it in "realtime"? But from your analyzer, how's the logs display?

[kinmun]

still the same after changing to realtime.

from analyzer, everything is showing up

[kinmun]

enabled local reports is not recommended.