FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
FortiKoala
Staff
Staff
Article Id 197838
Description

How can I run Daily/Weekly/Monthly reports


Scope

FAQ


Solution

To create a repeatable search which can be run multiple times, set up a new Collection.


Collections provide a way of saving a 'snapshot' of events at a certain time, but can also be 'refreshed', i.e. repeated to show events that match the search since you initially created the Collection.


Refresh a Collection on a daily/weekly/monthly basis to see updated results.  These can be exported to CSV.


Contributors