Managing reports – FortiAnalyzer – FortiOS 6.2.3

Managing reports

You can manage reports by going to Reports > Report Definitions > All Reports. Some options are available as buttons on the toolbar. Some options are available in the right-click menu. Right-click a report to display the menu.

Option Description
Create New Creates a new report. You can choose whether to base the new report on a report template.
Edit Edits the selected report.
Delete Deletes the selected report.
Clone Clones the selected report.
Run report Generates a report.
Folder Organizes reports into folders.
Import Imports a report from a management computer.
Export Exports a report to a management computer.
Show Scheduled Only Filters the list to include only reports that have been run or are scheduled to be run.

Organizing reports into folders

You can create folders to organize reports.

To organize reports into folders:

  1. If using ADOMs, ensure that you are in the correct ADOM.
  2. Go to Reports > Report Definitions > All Reports.
  3. Click Folder in the toolbar, and select Create New Folder.
  4. Specify the folder name and location and click OK. The folder is now displayed in the report list.

You can now create, clone, or import reports into this folder.

Importing and exporting reports

You can transport a report between FortiAnalyzer units. You can export a report from the FortiAnalyzer unit to the management computer. The report is saved as a .dat file on the management computer. You can then import the report file to another FortiAnalyzer unit.

To export reports:

  1. If using ADOMs, ensure that you are in the correct ADOM.
  2. Go to Reports > Report Definitions > All Reports.
  3. In the content pane, select a report, and select More > Export in the toolbar to save the file to the management computer.

To import reports:

  1. If using ADOMs, ensure that you are in the correct ADOM.
  2. Go to Reports > Report Definitions > All Reports.
  3. In the content pane, click More > Import in the toolbar. The Import Report dialog box opens.
  4. Drag and drop the report file onto the dialog box, or click Browse and locate the file to be imported on your local computer.
  5. Select a folder to save the report to from the dropdown list.
  6. Click OK to import the report.

Report template library

Because the cut, copy, and paste functions need access to the clipboard of your operating system, some Internet browsers either block it when called from the layout editor toolbar, or ask you to explicitly agree to it. If you’re blocked from accessing the clipboard by clicking the respective cut, copy and paste buttons from the toolbar or context menu, you can always use keyboard shortcuts.

A report template defines the charts and macros that are in the report, as well as the layout of the content.

You can use the following items to create a report template:

  • Text l Images l Tables
  • Charts that reference datasets l Macros that reference datasets

Datasets for charts and macros specify what data are used from the Analytics logs when you generate the report. You can also create custom charts and macros for use in report templates.

Creating report templates

You can create a report template by saving a report as a template or by creating a totally new template.

To create a report template:

  1. If using ADOMs, ensure that you are in the correct ADOM.
  2. Go to the Reports > Report Definitions> Templates.
  3. In the toolbar of the content pane, click Create New.
  4. Set the following options:
    1. If you are in a Security Fabric ADOM, the Category must be SecurityFabric. d. Language.
  5. Use the toolbar to insert and format text and graphics for the template. In particular, use the Insert Chart and Insert Macro buttons to insert charts and macros into the template.

For a description of the fields, see Reports Layout tab on page 120. For information about creating charts and macros, see Creating charts on page 130 and Creating macros on page 134.

  1. Click OK.

The new template is now displayed on the template list.

To create a report template by saving a report:

  1. If using ADOMs, ensure that you are in the correct ADOM.
  2. Go to Reports > Report Definitions > All Reports.
  3. In the content pane, select the report from the list, and click Edit in the toolbar.
  4. In the Layout tab, click the Save As Template button in the toolbar.
  5. In the Save as Template dialog box, set the following options, and click OK:
    1. If you are in a Security Fabric ADOM, the Category must be SecurityFabric.

The new template is now displayed on the template list.

Viewing sample reports for predefined report templates

You can view sample reports for predefined report templates to help you visualize how the reports would look.

To view sample reports:

  1. If using ADOMs, ensure that you are in the correct ADOM.
  2. Go to the Reports > Report Definitions > Templates.
  3. In the content pane, click the HTML or PDF link in the Preview column of a template to view a sample report based on the template.

Managing report templates

You can manage report templates in Reports > Report Definitions> Templates. Some options are available as buttons on the toolbar. Some options are available in the right-click menu. Right-click a template to display the menu.

Option Description
Create New Creates a new report template
Edit Edits a report template. You can edit report templates that you created. You cannot edit predefined report templates.
View Displays the settings for the predefined report template. You can copy elements from the report template to the clipboard, but you cannot edit a predefined report template.
Delete Deletes the selected report template. You cannot delete predefined report templates.
Clone Clones the selected report template.
Create Report Creates the selected report template.
Install Template Pack Upload and install a template pack.

List of report templates

FortiAnalyzer includes report templates you can use as is or build upon when you create a new report. FortiAnalyzer provide different templates for different devices.

You can find report templates in Reports > Report Definitions > Templates.

FortiGate report templates

Template – 360 Protection Report Template – Security Events and Incidents Summary
Template – 360-Degree Security Review Template – Self-Harm and Risk Indicators Report
Template – Admin and System Events Report Template – Situation Awareness Report
Template – Application Risk and Control Template – Social Media Usage Report
Template – Bandwidth and Applications Report Template – Threat Report
Template – Client Reputation Template – Top 20 Categories and Applications (Bandwidth)
Template – Cyber Threat Assessment Template – Top 20 Categories and Applications (Session)
Template – Cyber-Bullying Indicators Report Template – Top 20 Category and Websites (Bandwidth)
Template – DNS Report Template – Top 20 Category and Websites (Session)
Template – Data Loss Prevention Detailed Report Template – Top 500 Sessions by Bandwidth
Template – Detailed Application Usage and Risk Template – Top Allowed and Blocked with Timestamps
Template – Email Report Template – User Detailed Browsing Log
Template – FortiGate Performance Statistics Report Template – User Security Analysis
Template – GTP Report Template – User Top 500 Websites by Bandwidth
Template – High Bandwidth Application Usage Report Template – User Top 500 Websites by Session
Template – Hourly Website Hits Template – VPN Report
Template – IPS Report Template – Web Usage Report
Template – PCI-DSS Compliance Review Template – What is New Report
Template – SaaS Application Usage Report Template – WiFi Network Summary
Template – Security Analysis Template – Wireless PCI Compliance

FortiCache report templates

Template – FortiCache Default Report
Template – FortiCache Security Analysis
Template – FortiCache Web Usage Report

FortiClient report templates

Template – FortiClient Default Report
Template – FortiClient Vulnerability Scan Report

FortiDDoS report templates

Template – FortiDDoS Default Report

FortiMail report templates

Template – FortiMail Analysis Report
Template – FortiMail Default Report

FortiProxy report templates

Template – FortiProxy Default Report
Template – FortiProxy Security Analysis
Template – FortiProxy Web Usage Report

FortiSandbox report templates

Template – Endpoint Sandbox Detections Report
Template – FortiSandbox Default Report

FortiWeb report templates

Template – FortiWeb Default Report
Template – FortiWeb Web Application Analysis Report

Fabric report templates

Template – Fortinet Email Risk Assessment

This entry was posted in Administration Guides, FortiAnalyzer on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.