Technical Note: FortiAnalyzer query to check interface status

[psalian]

Description

This article provides the query to check the interface status of the associated FortiGates.

Solution

1) Under Reports > Datasets, Create a  new dataset.

2) Query:

select msg as description, status, from_itime(itime) as f_itime from $log where $filter and msg like '%<interface_name>%' order by f_itime

## interface_name : give the name of the interface which you would like to monitor

3) Select the Log Type as Event.

4) Create a new chart from the chart library.

5) Select the dataset.

6) Create a new report and use this chart in it.