simple FortiAnalyzer report

[j_alves]

Hi,

I'm new with Fortianalyzer and i have only a Fortigate. I have FortiAnalyzer 7.4.0 and I need to create a report that gives me the top 20 websites per user in the last 7 days. The idea is to display the user or ip and then the top 20 websites accessed by that user/ip.

[anignan]

Hi @j_alves 

You can create a chart from you search and use this to create a report.

REF: https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Create-a-custom-report-using-Chart-Bui...

Abdel

[j_alves]

Thanks, I didn't know that could be done there. It´s possible to select for example top 20 sites per user on log view?

[anignan]

You can probably to this with a dataset where you will use SQL query with group by statement.. Once you logs are indexed in the database you can use SQL SELECT DML to get whatever you need.

Abdel