FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
farhanahmed
Staff
Staff
Article Id 299452

 

Description This article describes that the FortiAnalyzer report does not show data for a few devices.
Scope FortiAnalyzer.
Solution
  1. Check if the devices (whose data is missing from the report) have relevant logs in Log View for the same period set in the report settings.
  2. If logs are listed in Log View then, check the report settings for the configured limit for the maximum number of rows

 

config system report setting
    set max-table-rows <integer> <----- Input integer value (10000-10000000).
    set max-rpt-pdf-rows <integer> <----- Input integer value (10000-1000000).
end

 

1.png

 

  1. By default, Charts are enabled to display the top 10 rows, change 'Show Top' to '0' to include all rows fetched from Analytical Database.

 

2.png

 

Note:

Default charts are not editable. Clone the default chart, set Show Top to '0', and use it in Reports.

 

  1. If all the above configs are verified and data is still missing from the report then, contact Fortinet Support TAC.

 

Related Articles:
FortiAnalyzer CLI Reference - Report Setting
Creating Charts - Show Top
Reports Editor Tab