FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
yujames
Staff
Staff
Article Id 193794
Description
This article describes how to utilize the new HTML5 Analytics page in terms of controlling the display for Event Type Column.  In 5.0 the HTML5 interface shows only when options are ticked.  There is an Event Name Column that is statically displayed that may confuse users.  This article explains how to turn on and off the Event Type Column and how the display column has changed behavior.
Solution
In HTML 5 for FortiSIEM 5.0 the display fields will show 4 Columns by default:

-Event Received Time
-Reporting Ip
-Event Name
-Raw Event Log

yujames_Screen Shot 2018-03-30 at 1.00.30 PM.jpg

The Event Name column is permanently displayed. There is no way to disable this column at this time and will always display as part of the raw event display field.

To enable or disable Event Type column, click on the checkbox on named "Show Event Type". If "Event Type" under the display columns is removed then the "Show Event Type" Checkbox will be removed.

yujames_Screen Shot 2018-03-30 at 1.00.11 PM.jpg

Contributors