Hot!Interface History Custom Report

Page: 12 > Showing page 1 of 2
Author
MikePruett
Platinum Member
  • Total Posts : 677
  • Scores: 15
  • Reward points: 0
  • Joined: 2014/01/08 19:39:40
  • Location: Montgomery, Al
  • Status: offline
2015/01/19 19:24:46 (permalink)
0

Interface History Custom Report

As we all know, the status dashboard has an "Interface History" widget. I love this widget however it resets when the device is power cycled.
 
How would I go about creating a FortiAnalyzer report that would show the same data in the same manner (hour, day week) bandwidth in and out (MBps) See attached file for how it looks in the GUI. 
The FAZ is running 5.0.x code 
 
I know there is a dataset I need to make etc but I have no idea how to do that (databases and sql are not strong points of mine)interface_history.gif

Attached Image(s)

#1
hzhao_FTNT
Expert Member
  • Total Posts : 344
  • Scores: 58
  • Reward points: 0
  • Joined: 2014/09/12 10:03:54
  • Status: offline
Re: Interface History Custom Report 2015/01/20 07:53:49 (permalink)
0
Please run predefined "Bandwidth and Application report", and check the first chart "Bandwidth Summary" .
You may also need apply interface filter in Advanced Settings in order to get per-interface report. 
For time intervals, please try to run report with different report period.
post edited by hzhao_FTNT - 2015/01/20 07:58:28

Attached Image(s)

#2
MikePruett
Platinum Member
  • Total Posts : 677
  • Scores: 15
  • Reward points: 0
  • Joined: 2014/01/08 19:39:40
  • Location: Montgomery, Al
  • Status: offline
Re: Interface History Custom Report 2015/01/20 09:33:34 (permalink)
0
Thanks for the help.
 
That one is close, but it only shows the total bandwidth transfered (gigabytes, megabytes etc) I am more interested in the throughput bandwidth transfered (gigabits, megabits etc per second) for instance if the firewall is on a T1 the transfer tops out at 1.544 mbps..
#3
hzhao_FTNT
Expert Member
  • Total Posts : 344
  • Scores: 58
  • Reward points: 0
  • Joined: 2014/09/12 10:03:54
  • Status: offline
Re: Interface History Custom Report 2015/01/20 11:03:18 (permalink)
0
Unfortunately we don't have any log field to directly reflect real-time speed, and current FAZ do not allow user to create this kind of timeline chart. If you want to see max speed by time interval in table chart, you can try below dataset:
select $flex_timescale as hodex, max(coalesce(sentbyte, 0)/duration) as traffic_out_speed, max(coalesce(rcvdbyte, 0)/duration) as traffic_in_speed from $log where $filter and logid_to_int(logid) not in (4, 7, 14) and duration!=0 group by hodex having sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0))>0 order by hodex
 
#4
Ahslan
New Member
  • Total Posts : 20
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/07/29 07:24:51
  • Status: offline
Re: Interface History Custom Report 2017/02/23 12:27:09 (permalink)
0
I know this thread is over two years old but I'm looking for the exact same thing. Love the "Interface History" widget and want to know if there is a FortiAnalyzer report that basically does the same thing? I'm currently running FortiAnalyzer 5.4.2
#5
hzhao_FTNT
Expert Member
  • Total Posts : 344
  • Scores: 58
  • Reward points: 0
  • Joined: 2014/09/12 10:03:54
  • Status: offline
Re: Interface History Custom Report 2017/02/24 10:35:19 (permalink)
0
From 5.4.1, we have a predefined bar chart "Interface Bandwidth Usage". Please insert this chart into a report and specify an interface. For bandwidth rate, please go to FortiView->Resource Usage, select "Export to Report Chart" from up-right pull-down menu, create a chart, and add this chart into report.
 
Regards,
hz
#6
Ahslan
New Member
  • Total Posts : 20
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/07/29 07:24:51
  • Status: offline
Re: Interface History Custom Report 2017/02/27 10:49:04 (permalink)
0
The Resource Usage report that is exported to a chart doesn't provide a graph on traffic in vs out for a specific interface. All it seems to do is provide a table with the average bandwidth as one of the entries. As for the interface bandwidth usage chart, that seems to only provide a bar graph of total amount of data sent\received (not the same as the info provided by the interface history widget which provides the speed of the transfers occurring on the interface at a specific time). It's surprising how this info is so easily accessed through a widget yet there doesnt seem to be a report for it.
#7
bartman10
Silver Member
  • Total Posts : 87
  • Scores: 18
  • Reward points: 0
  • Joined: 2014/05/01 18:22:38
  • Status: offline
Re: Interface History Custom Report 2017/04/05 12:31:17 (permalink)
0
I also want this.. I'm troubleshooting some stuff and need to put some puzzle pieces together.

300E x3, 200D, 140D, 94D, 90D x2, 80D, 40C, handful of 60E's.. starting to loose track.
Over 100 WiFi AP's and growing.
FAZ-200D
FAC-VM 2 node cluster
Friends don't let friends FWF!
#8
Ahslan
New Member
  • Total Posts : 20
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/07/29 07:24:51
  • Status: offline
Re: Interface History Custom Report 2017/04/05 12:33:45 (permalink)
0
I opened a ticket with Fortinet and confirmed with them that this graph is not currently possible with FortiAnalyzer. Safe to say, ridiculously disappointing :'(
#9
fikri
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/04/03 22:10:10
  • Status: offline
Re: Interface History Custom Report 2017/04/05 17:31:45 (permalink)
0
Ahslan
I opened a ticket with Fortinet and confirmed with them that this graph is not currently possible with FortiAnalyzer. Safe to say, ridiculously disappointing :'(




that's very disappointing..this report is really crucial to get what is the internet utilization average rate not total .
#10
fikri
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/04/03 22:10:10
  • Status: offline
Re: Interface History Custom Report 2017/04/06 17:01:38 (permalink)
0
if you guys use FAZ version 5.4.2
 
On the resource usage you can see the bandwitdh rate. But I'm not sure the measurement in bytes /kb/mb or else.
 
refer to the image below, any guys have any opinion on this
#11
hzhao_FTNT
Expert Member
  • Total Posts : 344
  • Scores: 58
  • Reward points: 0
  • Joined: 2014/09/12 10:03:54
  • Status: offline
Re: Interface History Custom Report 2017/04/06 17:30:55 (permalink)
0
The bandwidth rate here is in kbps, but it is not based on interface. If you are interested, I can provide a report for you to run similar chart in report.
 
regards,
hz
#12
fikri
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/04/03 22:10:10
  • Status: offline
Re: Interface History Custom Report 2017/04/06 17:38:06 (permalink)
0
Thanks for the info. Means total interface rate ?
so you have a method to run the report base on interface base on rate?..
#13
hzhao_FTNT
Expert Member
  • Total Posts : 344
  • Scores: 58
  • Reward points: 0
  • Joined: 2014/09/12 10:03:54
  • Status: offline
Re: Interface History Custom Report 2017/04/06 17:57:54 (permalink)
0
You can run this report per FGT vdom, if you have many devices in same ADOM, go to report setting and select "Multiple Reports". This report is based on FGT event log "perf-stats", which is sent from FGT every 5 min by default. BTW, Do you want to see the total bandwidth rate or sent/received rate? Average or Maximum?
 
Currently FGT doesn't send interface bandwidth rate info to FAZ, we will check with FOS team and see if we can add this feature.
 
Regards,
hz
#14
Mikael.A
Bronze Member
  • Total Posts : 51
  • Scores: 0
  • Reward points: 0
  • Joined: 2015/06/23 06:39:23
  • Status: offline
Re: Interface History Custom Report 2017/04/18 01:20:07 (permalink)
0
Hello!
Would be lovely to have this. Especially in troubleshooting performance eval scenarios.
As well as drill down live view in Fortiview per interface. Same view as the combined bandwidth.
I man can dream :)
#15
rosario_thobias@bwdsb.on.ca
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/04/03 17:23:47
  • Status: offline
Re: Interface History Custom Report 2017/05/09 15:28:15 (permalink)
0
I'm also looking for the same kind of report. If anyone has found a way, please let me know. Maybe a third party software could keep track of our WAN interface usage?
#16
Osama
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/08/28 02:42:00
  • Status: offline
Re: Interface History Custom Report 2017/08/28 03:29:43 (permalink)
0
hzhao_FTNT
Unfortunately we don't have any log field to directly reflect real-time speed, and current FAZ do not allow user to create this kind of timeline chart. If you want to see max speed by time interval in table chart, you can try below dataset:
select $flex_timescale as hodex, max(coalesce(sentbyte, 0)/duration) as traffic_out_speed, max(coalesce(rcvdbyte, 0)/duration) as traffic_in_speed from $log where $filter and logid_to_int(logid) not in (4, 7, 14) and duration!=0 group by hodex having sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0))>0 order by hodex
 




Thanks Mr Hzhao
but here the graph represent the value every one hour, Kindly help me to be every one minute to be more closed to the real time as Fortiview in Fortigate.
 
 
#17
hzhao_FTNT
Expert Member
  • Total Posts : 344
  • Scores: 58
  • Reward points: 0
  • Joined: 2014/09/12 10:03:54
  • Status: offline
Re: Interface History Custom Report 2017/08/28 10:16:34 (permalink)
0
Please change $flex_timescale to to_char(from_itime(itime), 'MM-DD HH:MI')
#18
Osama
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/08/28 02:42:00
  • Status: offline
Re: Interface History Custom Report 2017/08/29 00:45:25 (permalink)
0
hzhao_FTNT
Please change $flex_timescale to to_char(from_itime(itime), 'MM-DD HH:MI')




Sorry hzhao,
 
select to_char(from_itime(itime), 'MM-DD HH:MI') as hodex, sum(traffic_out) as traffic_out, sum(traffic_in) as traffic_in from ###(select $flex_timestamp as timestamp, sum(coalesce(sentbyte, 0)) as traffic_out, sum(coalesce(rcvdbyte, 0)) as traffic_in from $log where $filter and logid_to_int(logid) not in (4, 7, 14) group by timestamp having sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0))>0 order by timestamp desc)### t group by hodex order by hodex
 
 
has an error 
ERROR: column "itime" does not exist LINE 1: select * from (select to_char(from_itime(itime), 'MM-DD HH:M...
                                                                                                                            ^
 
 
either when I tried the select * from $log
there was a coloum named itime

 
thanks for your support, help me if there is another modification for above query.
#19
Osama
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/08/28 02:42:00
  • Status: offline
Re: Interface History Custom Report 2017/08/29 01:09:20 (permalink)
0
 
Please another question?
May I used the wrong report or I have a confusion
I have used the Bandwidth and Application report and i  have checked the Bandwidth summary and also the dataset
and the result on picture:FAZ bandwidth summary, but the real time interface consumption from the Fortigate as picture on below request: FG interface consumption 
 
please advice for the difference on time line
and the huge difference on bandwidth calculation 

Attached Image(s)

#20
Page: 12 > Showing page 1 of 2
Jump to:
© 2019 APG vNext Commercial Version 5.5