FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
asostizzo_FTNT
Article Id 197565

Description

This article describes what to do if no entries are displayed in FortiView.

 


Solution

FortiAnalyzer may still be rebuilding the SQL database or a rebuild may have been triggered by a firmware update. Refer to the related article in the end of this KB (How to check SQL Database rebuild progress on FortiAnalyzer?)

If an SQL rebuild is not in progress, you can check if there are logs inserted into the SQL database by going into Log View.

If necessary, expand the time period for FortiView.

Consult Technical Support if an SQL rebuild is required.

Note: Performing an SQL rebuild can take considerable time to complete. After the rebuild is complete, at first reports may be generated slower than usual until the associated hcache tables are built.


Related Articles

Technical Note: How to check SQL Database rebuild progress on FortiAnalyzer

Technical Tip: FortiAnalyzer SQL database delete and rebuild

Contributors