Fortimanager / FortiAnalyser multi-domain how to search ALL ?

[fran19422]

Hello, I have Fortimanger and FortiAnalyzer both with many ADOMs.

- In FortiManager is there way to search on the CLI for a particular IP that may be in ANY of the ADOMs ?

- in FortiAnalyser is there a way on the CLI or otherwise to search the logs of ALL ADOMS at once ?

Thanks for any help.

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[Anthony_E]

Hello,

Unfortunately, I could not find any answer to your question.

May I invite you to contact the Fortinet support: https://support.fortinet.com/welcome/#/

and open a ticket with them.

Thanks a lot in advance.

Regards,

[boneyard]

Similar question by me here: https://community.fortinet.com/t5/Support-Forum/Search-accross-FortiAnalyzer-ADOMs-possible/td-p/368...

Also no reply, so I would just say, not possible.

[Nur]

Hi,

in FortiAnalyser is there a way on the CLI or otherwise to search the logs of ALL ADOMS at once ?

>> There no option to search log in CLI from FortiAnalyzer

- In FortiManager is there way to search on the CLI for a particular IP that may be in ANY of the ADOMs

>> From FortiManager, there an option to display config in CLI for device level and ADOM DB, but there no option to sorted the particular IP in ANY.

>> To display config for device level and ADOM DB, you can refer below doc

https://docs.fortinet.com/document/fortimanager/7.6.2/cli-reference/43841/fmpolicy

[Anthony_E]

Thanks a lot Nur!

[sw2090]

In FMG there is diag dvm device list. Maybe you could grep its output for an ip. This lists all devices in all adom by default and also outputs the adom.