Datasets
FortiAnalyzer datasets are collections of log files from monitored devices. Reports are generated based on these datasets.
Pre-defined datasets for each supported device type are provided, and new datasets can be created and configured.
To view and configure datasets, go to the Reports tab and select Advanced > Dataset in the tree menu.
To create a new dataset:
1. Go to the Reports tab and select Advanced > Dataset in the tree menu.
2. Select Create New on the tool bar, or right-click in the dataset list and select New from the pop-up menu.
The Create New Dataset dialog box opens.
3. Enter the required information for the new dataset.
Name | Enter a name for the dataset. |
dev-type | Select a device type from the drop-down list. |
log-type | Select a log type from the drop-down list. |
SQL Query | Enter the SQL query used for the dataset. |
4. Select OK to create the new dataset.
To clone a dataset:
1. Go to the Reports tab and select Advanced > Dataset in the tree menu.
2. Select the dataset that you would like to clone and select Clone from the tool bar or right-click menu. The Clone Dataset dialog box opens.
3. Edit the information as needed and select OK to clone the dataset and create a new dataset.
To edit a dataset:
1. Go to the Reports tab and select Advanced > Dataset in the tree menu.
2. Double-click on the dataset that you would like to edit, or select the dataset and select Edit from the tool bar or right-click menu. The Edit Dataset dialog box opens.
Pre-defined datasets cannot be edited, the information can only be viewed.
3. Edit the information as required and select OK to finish editing the dataset.
To delete datasets:
1. Go to the Reports tab and select Advanced > Dataset in the tree menu.
2. Select the dataset or datasets that you would like to delete and select Delete from the tool bar or right-click menu.
Pre-defined datasets cannot be deleted.
3. Select OK in the confirmation dialog box to delete the datasets or datasets.
