FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
Jackie_T
Staff
Staff
Article Id 192438
Description
This article describes how to enable auto-cache for FortiAnalyzer report generation.

Useful links:

https://docs.fortinet.com/document/fortianalyzer/6.0.0/administration-guide/282280/enabling-auto-cac...
https://help.fortinet.com/fa/faz50hlp/56/5-6-2/FMG-FAZ/2300_Reports/0025_Auto-cache.htm

Solution
When a report is generated , FortiAnalyzer will assemble the required dataset from the log database and the time to complete a report will increase as the data size growth.
By enabling auto-cache feature, it will generate a hcache(hard cache), which stays on the form of database tables instead of memory.
Hcache runs queries on matured database tables in advance and caches the interim results of each data set query.
When it is time to generate the report, much of the data sets are already assembled, and the system only needs to merge the results from hcaches.
This reduces report generation time significantly.

Here is the Step to enable the auto-cache.

From GUI:
1) Go to Reports -> Report Definitions -> All Reports.
2) Select the report from the list, and select 'Edit' in the toolbar.
3) In the Settings tab, enable' Auto-cache'.
4) Select 'Apply'.

Contributors