FortiNAC
NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
cmaheu
Staff
Staff
Article Id 197160
Description
This article describes the methods that can be used to collect historical connection history for a given MAC address.



Scope
Version: 8.x

Solution
Administration UI
The connection records can be accessed under Logs > Connections.  If the connection records spanning the desired time frame have already been archived, they would have to be imported.  See section Import archived data in the Administration Guide for instructions.

The records can then be exported to a file.  See section Export data in the Administration Guide for instructions.


CLI
1. Login to appliance CLI as root.  Contact Support for assistance.
2. Navigate to
the backup directory where the logs are archived.  Type
cd /bsc/campusMgr/master_loader/mysql/backup

3. At the prompt, type the following command using the host's MAC address.
zgrep "<MAC address>" DYN*

Example
> zgrep "00:0C:29:29:89:4D" DYN*


This will result in all connection records for that MAC address.


Example
DYNAMICLOG_Archive_2020_07_27_01_01_56_hercules.supportlab.fortinac.com.bua.gz:93036,"5718","10.12.242.57","5359",8,1595007468527,"238com.bsc.api.dynamic.DynamicClientEntry131.415930314571821210.12.242.571453592131595007468527213159500746852721315950074685271101101101101101102115222954760721700:0C:29:29:89:4D15blain231FSW-DataCenter port2 { port2 } ",1595007468527,0,0,52229547607,"00:0C:29:29:89:4D","blain","FSW-DataCenter port2 { port2 } "
DYNAMICLOG_Archive_2020_07_27_01_01_56_hercules.supportlab.fortinac.com.bua.gz:93044,"5718","10.12.242.57","5359",8,1595007837800,"238com.bsc.api.dynamic.DynamicClientEntry131.415930414571821210.12.242.571453592131595007837800213159500783780021315950078378001101101101101101102115222954760721700:0C:29:29:89:4D15blain231FSW-DataCenter port2 { port2 } ",1595007837800,0,0,52229547607,"00:0C:29:29:89:4D","blain","FSW-DataCenter port2 { port2 } "
DYNAMICLOG_Archive_2020_07_27_01_01_56_hercules.supportlab.fortinac.com.bua.gz:93054,"5718","10.12.242.57","5359",8,1595009764774,"238com.bsc.api.dynamic.DynamicClientEntry131.415930514571821210.12.242.571453592131595009764774213159500976477421315950097647741101101101101101102115222954760721700:0C:29:29:89:4D18Maccalla231FSW-DataCenter port2 { port2 } ",1595009764774,0,0,52229547607,"00:0C:29:29:89:4D","Maccalla","FSW-DataCenter port2 { port2 } "
DYNAMICLOG_Archive_2020_07_27_01_01_56_hercules.supportlab.fortinac.com.bua.gz:93112,"5718","10.12.242.57","5359",8,1595018806015,"238com.bsc.api.dynamic.DynamicClientEntry131.415931114571821210.12.242.571453592131595018806015213159501880601521315950188060151101101101101101102115222954760721700:0C:29:29:89:4D15blain231FSW-DataCenter port2 { port2 } ",1595018806015,0,0,52229547607,"00:0C:29:29:89:4D","blain","FSW-DataCenter port2 { port2 } "
DYNAMICLOG_Archive_2020_07_27_01_01_56_hercules.supportlab.fortinac.com.bua.gz:93113,"5718","10.12.242.57","5359",8,1595018905322,"238com.bsc.api.dynamic.DynamicClientEntry131.415931114571821210.12.242.571453592131595018905322213159501890532221315950189053221101101101101101102115222954760721700:0C:29:29:89:4D18Maccalla231FSW-DataCenter port2 { port2 } ",1595018905322,0,0,52229547607,"00:0C:29:29:89:4D","Maccalla","FSW-DataCenter port2 { port2 } "



Contributors