To create a new dataset:
- In the dataset list, either select Create New from the toolbar, or right-click in the dataset list and select Create New from the pop-up menu. The New Dataset dialog box opens.
Create a new dataset
- Enter the required information for the new dataset.
| Name Enter a name for the dataset. |
| Log Type Select a log type from the drop-down list.
l The following log types are available for FortiGate: Application Control, Attack, DLP Archive, DLP, Email Filter, Event, Traffic, Virus, Web Filter, and Network Scan. l The following log types are available for FortiMail: Email Filter, Event, History, and Virus. l The following log types are available for FortiWeb: Attack, Event, and Traffic. |
| Query Enter the SQL query used for the dataset. |
| Add Variable Select the add variable icon to add a variable, expression, and description information. |
| Test query with specified devices and time period |
| Devices Select All Devices or Specify to select specific devices to run the SQL query against. Use the add device icon to add multiple devices to the query. |
| Time Period Use the drop-down list to select a time period. When selecting Other, enter the start date, time, end date, and time. |
| Test Select Test to test the SQL query before saving the dataset configuration. |
- Test the query to ensure that the dataset functions as expected, then select OK to create the new dataset.
To clone a dataset:
- In the dataset list, either select a dataset then select Clone from the toolbar, or right-click on the dataset then select Clone from the pop-up menu. The Clone Dataset dialog box opens.
- Edit the information as required, then test the query to ensure that the dataset functions as expected.
- Select OK to create a new, cloned dataset.