Technical Note: FortiAnalyzer query to check the status of AP which joined or left

[psalian]

Description

This article provides the query to check the status for an AP which joined or left.

Solution

1) Under Reports > Datasets, Create a  new dataset.

2) Query: select msg as description, from_itime(itime) as time from $log where $filter and msg like '%joined%' or msg like '%left%' order by time

3) Select the Log Type as Event.

4) Create a new chart from the chart library.

5) Select the dataset.

6) Create a new report and use this chart in it.