How to create a report policy usage

[vincla]

Hello ,

I want create a report in Forti Analyser to see if a policy is used or hit, so that i can remove the unused policies.

Kind Regards,

Vincent

[brazz_FTNT]

Hey, 

I am suggesting something like below:

SELECT policyid AS MyPolicyID , COUNT(*) AS MyPolicyHitCount, devid AS MyDeviceID FROM $log WHERE $filter GROUP BY MyPolicyID, MyDeviceID ORDER BY MyPolicyHitCount DESC

*Log Type is Traffic.

Let me know what you think.

Cheers

[vincla]

Hello brazz_FTNT,

I will try that, thanks for your reply.

I will let you when it works.

Regards,

Vincent

[Leen · Accepted solution]

In Fortianalyser menu FortiView, select under traffic "Policy hits"

make your selections on time frame

Now top right you can export to report chart. This will export the current SQL query as a report chart which you can use in any report.

Leen

[vincla]

Thank you very much that is the report i was looking for :)

Regards,

Vincent