Fortianalyzer Report generated if no data

[network_ict]

Hello, We are using the Fortianalyzer v6 to generate reports from our fortigate1500D .

For some report like IPS alerts, we would like to generate this report only if there were IPS alerts in the last 24h. If no IPS alert have triggered, no report would be generated.

This way, we are not sending "empty" reports to security team if no IPS alert occured.

Is there an option to  do this ?

Thanks a lot.

Regards

Frédéric

[chall_FTNT]

As far as I know, there is no such capability.  If a report is requested, the FortiAnalyzer will generate a report, even if the charts are all empty (no matching data).  And report notification is not dependent on the content of those reports.  Sounds like a feature request to raise with a Fortinet saleperson or partner.