Fortianalyzer playbook match firewall rule query

[toror5]

Hello,

I have one business case where i need to do a playbook to do the next:

When a traffic match with a specific firewall rule ( deny ) ( fortigate), generate a custom report including the Source IPs that matched this firewall rule .

How I can do it ? I tried with events handlers but I never find the way to work in real time...

[knagaraju]

Hello Toror,
Please build a custom report for your requirement.
Please follow the steps as per the below links
https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-build-a-custom-report-on-FortiA...

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-create-FortiAnalyzer-reports-us...

Regards
Nagaraju.