Fortinet 3.0 MR7 manual Configuring data filter templates, Data filter templates

Configuring reports Reports

Configuring data filter templates

You can configure multiple data filter templates for reports in Report > Config > Data Filter. These templates can be applied to any report schedule you want.

Figure 4: Data filter templates

Create New Select to create a new data filter template and configure its settings.

Delete	Select to remove data filter templates whose check boxes are selected.
	• To delete one or more data filter templates, select the check box next to
	their name, then select Delete.
	• To delete all reports, select the column heading check box. All data
	filter templates’ check boxes become selected, and then select Delete.
	You cannot delete a data filter template if it is already being used by a
	report layout or report schedule. If you want to delete a data filter template
	that is being used by a report schedule, edit that report layout or report
	schedule to unselect the data filter template.
Name	Displays the name of the data filter template
Description	Displays any comments entered in the Description field when configuring
	the data filter template.
Action	Select Delete to remove the data filter template.
	Select Edit to view or modify the data filter template.

Data filters are configured to sort through and omit specific log information, enabling you to include or exclude log messages to focus your report on certain types of log messages that match your criteria. For example, you want to include a specific range of IP addresses. In the Source(s) field you input the IP addresses range, 172.20.110.0-255, which will match all IP addresses in the 172.20.110.0/255.255.255.0 or 172.20.120.110/24. If you do not want to match this specific IP address range, you would enter the IP address range and select the “not” check box.

Data filter options operate on specific log message fields. For information about log message fields, see the FortiGate Log Message Reference.

	FortiAnalyzer Version 3.0 MR7 Administration Guide
122	05-30007-0082-20080908