Granular Detail on Interface Bandwidth

[mscirri]

I have a FortiGate 100F on OS version 7.4.4. I have the Interface Bandwidth widget on my dashboard. When I have the timeframe set to 1 hour, I am getting granular detail, showing data points around every 10 seconds.    When I go to the 24-hour view, the data is aggregated to every 5 minutes, which is not useful.

Is there a way to look at bandwidth usage more than 1 hour in the past but with finer granularity?

FortiGate 

[AEK]

As per my knowledge, you may not find such detailed info on FG, but this should be doable with NetFlow/sFlow.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-Configure-Netflow/ta-p/196080

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-sFlow/ta-p/196930

Hope it helps.

[mscirri]

Do you have a specific tool that you recommend sending the information to?

[AEK]

We worked one day on a french tool called H5-Flow. That's the only one I tested, but I guess there are many alternatives.

[Debbie_FTNT]

In addition to netflow/sflow, you could also go with FortiAnalyzer, if you have one already; it has some predefined reports for bandwidth, and you can simply apply filters for a single device and interface to narrow down what logs go into the report.

There should be some for interface bandwidth specifically, if I remember correctly.

Cheers,

Debbie