Hostname in forticloud reports

[BartC]

Hey,

I'm running a #FG30E with OS 6.2.9 and export my data to Fortigate cloud. I use a lot theWebsites per source report. Now the source is represented by its IP address, but since this assigned via DHCP it can change over time. Can't I generate this report with hostname or devicename as source description iso IP address ? I looked in the reports templates, but there I can't find the fields I need.

Any suggestions ?

[Anonymous]

Hello BartC, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

  Fortinet Community Team 

[kcheng]

Hi BartC,

I understand that you would like to generate the report based on machine hostname instead of IP address as it changes over time since its DHCP allocation.

In order to accomplish the respective, you will need the following configured:
1. Enable Device Detection on the interface to which your machine is connecting to. For eg: internal LAN, DMZ and etc. (ref: https://kb.fortinet.com/kb/documentLink.do?externalID=FD52244)
2. Configure primary DNS to your internal DNS (ref: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/752486/dns-domain-list)
3. Configure the following in FortiGate CLI:
--------------------------------------------
config log setting
set resolve-ip enable
end
--------------------------------------------
4. Enable traffic logging on the policy where you would like to capture information on. Go to Policy & Objects > IPv4 Policy. Edit the policies controlling the traffic you wish to log. Under Logging Options, select All Sessions.

Alteration of reports in FortiCloud would require a paid subscription license. Once you have the license, you can edit the report to include the source name in the summary report.