FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
awasfi_FTNT
Staff
Staff
Article Id 196523
Description
Custom index can be used on FortiAnalyzer to accelerate searching through logs and loading the results faster.

Solution
Example
config system sql
config custom-index
edit <Integer>
set device-type Fortigate
set index-field <Field_Name>
set log-type <Type>
next
end
end

Use "?" to list available index fields and log types:
set index-field ?
set log-type ?

Contributors