Charts

Chart elements can only be placed in content sections of the report template. The chart content can be filtered, and the chart content can be edited.

Figure 131:Add a new chart

2. Find the chart that you would like to add in one of the following ways:
   • Browse the list of all the available the available charts.
   • Select the category of the chart you are looking for from the Category drop-down list, then browse the list of the charts in that category.
   • Search for the chart by entering all or part of the chart name into the Search
3. Select OK once you have found and selected the chart you would like to add.

The chart’s placeholder will appear in the location that you had selected in the template.

To add chart filters:

1. Select the chart options icon, , in the chart toolbar.

The Chart Options dialog box will open. This page displays template filters and allows you to add chart filters.

Figure 132:Chart options

2. Add charts filters to the chart as needed.
3. Select OK to apply the filters to the chart and return to the report layout page.

To edit a chart:

1. Select the edit icon in the chart toolbar, , or double-click on the chart.

If you are attempting to edit a predefined chart, a warning dialog box will open (Figure 133). Select Copy and Edit to continue editing a clone of the chart.

Figure 133:Edit predefined chart

The Edit Chart or Clone Chart (if editing a predefined chart) dialog box will open.

2. See “To edit a chart:” on page 193 for more information on editing and cloning charts.
3. Select OK to apply your changes.

Breaks

Two types of breaks can be added to the content sections of a report template: line breaks, and page breaks. Breaks can not be edited.

To add a break:

Click and drag the line break or page break icon (         , or       , respectively) to the location in a content section in the report template where you want to add the break.

Chart library

The FortiAnalyzer unit provides a selection of predefined charts. New charts can be created using the custom chart wizard, by cloning and editing an existing chart, or by using the advanced chart creation option. You can select to display predefined chart, custom charts, or both.

To view a listing of the available predefined charts, see “Charts, Datasets, & Macros” on page 219.

For advanced users, right-click the right content pane and select Create New to create SQL based charts. See “To create a new chart:” on page 191.

Charts are predefined to show specific information in an appropriate format, such as pie charts or tables. They are organized into categories, and can be added to, removed from, and organized in reports.

To view the chart library, go to Reports > Chart Library.

Figure 134:Chart library

The following information is displayed:

Name	The name of the chart. Click the column header to sort entries in the table by name.
Description	The chart description. Click the column header to sort entries in the table by description.
Category	The chart category. Click the column header to sort entries in the table by category.
Search	Enter a search term in the search field to find a specific chart.
Pagination	Adjust the number of entries that are listed per page and browse through the pages.

The following options are available in the toolbar:

Wizard	Launch the custom chart wizard. This option is only available for FortiGate and FortiCarrier ADOMs. See “Custom chart wizard” on page 187.
Create New	Create a new chart. For FortiGate and FortiCarrier ADOMs, this option is only available from the right-click menu. See “To create a new chart:” on page 191.
Edit	Select to edit a chart. This option is only available for custom charts. See “To edit a chart:” on page 193.
View	Select to view chart details. This option is only available for predefined charts, as they cannot be edited.
Delete	Select to delete a chart. This option is only available for custom charts. See “To delete charts:” on page 193.
Clone	Select to clone an existing chart. See “To clone a chart:” on page 193.
Show Predefined	Select to display predefined charts.
Show Custom	Select to display custom charts.

Custom chart wizard

The custom chart wizard is a step by step guide to help you create custom charts. It is only available for FortiGate and FortiCarrier ADOMs.

To start the custom chart wizard, go to Reports > Chart Library, and select  Wizard in the toolbar. Follow the steps in the chart wizard, outlined below, to create a custom chart.

Select the Tutorial icon, , on any of the wizard windows to view the online chart wizard video.

Step 1 of 3 – Choose data

Configure the data that the custom chart will use.

Figure 135:Choose data

Configure the following settings, then select Next to proceed to the next step:

Log Type	Select either Traffic Log or Event Log.
Group by	Select how the data are grouped. Depending on the chart type selected in step 3, this selection will relate to Column 1 (Table), the Y-axis (Bar and Line graphs), or the Legend (Pie chart). See “Step 3 of 3 – Preview” on page 190. The available options will vary depending on the selected log type: •      Traffic log: Application Category, Application ID, Application Name, Attack, Destination Country, Destination Interface, Destination IP, Device Type, Source Interface, Source IP, Source SSID, User, Virus, VPN, VPN Type, Web Category, or Website (Hostname). •      Event log: VPN Tunnel, or Remote IP.
Aggregate by	Select how the data is aggregated. Depending on the chart type selected in step 3, this selection will relate to Column 2 (Table), the X-axis (Bar and Line graphs), or the Value (Pie chart). See “Step 3 of 3 – Preview” on page 190. The following options are available: Duration, Received Bytes, Sent Bytes, Total Bytes, Total Sessions or Total Blocked Sessions (Traffic log only).
Show	Select how much data to show in the chart from the drop-down list. One of the following: Top 5, Top 10, Top 25, Top 50, or Top 100.

Step 2 of 3 – Add filters

You can add one or more filters to the chart. These filters will be permanently saved to the dataset query.

Figure 136:Add filters page

Configure the following settings:

Match	Select All to filter data based on all of the added conditions, or select Any of the Following Conditions to filter the data based on any one of the conditions.
Add	Select to add filters. For each filter, select the field, and operator from the drop-down lists, then enter or select the value as applicable. Filters vary based on device type. The available filters vary depending on the log type selected. Select the delete icon, , to remove a filter.
Destination Interface	This filter is available for traffic logs only. The available operators are: Equals, Not Equal, Contains, and Not Contain.
Destination IP	This filter is available for traffic logs only. The available operators are: Equals, Not Equal, and Range. If Range is selected, enter the starting and ending IP address in the value fields.
Security Action	This filter is available for traffic logs only. The available operators are: Equals and Not Equal. The value is always Pass Through.
Security Event	Select Equals or Not Equal from the second drop-down list. Select one of the below options from the third drop-down list. This filter is available for traffic logs only. The value can be one of the following: Analytics, Application Control, AV Error, Banned Word, Command Block, DLP, File Filter, General Mail Log, HTML Script Virus, IPS, MIME Fragmented, MMS Checksum, MMS Dupe, MMS Endpoint, MMS Flood, MAC Quarantine, Oversize, Script Filter, Spam Filter, SSH Block, SSH Log, Switching Protocols, Virus, VOIP, Web Content, Web Filter, or Worm.
Service	This filter is available for both traffic and event logs. The available operators are: Equals, Not Equal, Contains, and Not Contain.
Source Interface	This filter is available for traffic logs only. The available operators are: Equals, Not Equal, Contains, and Not Contain.
Source IP	This filter is available for traffic logs only. The available operators are: Equals, Not Equal, and Range. If Range is selected, enter the starting and ending IP address in the value fields.
User	This filter is available for both traffic and event logs. The available operators are: Equals, Not Equal, Contains, and Not Contain.

Step 3 of 3 – Preview

The preview page allows you to select the chart type and rename the custom chart.

Figure 137:Preview page

Configure the following settings:

Chart Type	Select the chart type in the drop-down list; one of the following: Bar, Line, Pie, or Table. Depending on the chart settings configured in the previous two steps, the available options may be limited.
Column 1 / Y-axis / Legend	Displays the Group by selection. See “Group by” on page 188. The field varies depending on the chart type.
Column 2 / X-axis / Value	Displays the Aggregate by selection. See “Aggregate by” on page 188. The field varies depending on the chart type.
Name	Displays the default name of the custom chart. This field can be edited.

Select Finish to finish the wizard and create the custom chart. The custom chart will be added to the chart table and will be available for use in report templates.