Only sent a report schedule via email when appear log on Forti-analyzer

[mua-cho-mat]

Hi all, 

I have created a schedule report daily on Forti-Analyzer and sent to email. I want to only sent email when appear log, if no log appear then don't sent email

Anyone have idea? Thanks

[Anonymous]

Hello mua-cho-mat, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

 Fortinet Community Team 

[tio3udes]

Hello mua-cho-mat!

I don't think you can condition the notification on the fact that the report has or hasn't data.

I believe, instead of working with reports you should work with Event Handlers. This function kinda turns FortiAnalyzer into a SIEM. You can set up  mail alerts based on the fact that FortiAnalyzer received or not some type of log.

you can read about it on:

https://docs2.fortinet.com/document/fortianalyzer/6.0.0/administration-guide/849421/event-handlers