Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Fullmoon
Contributor III

App Control dataset

Can we create dataset similar to this report request?

Top 10 Applications in a given policy

Columns:

  • Services / Application Name
  • User / Source IP address
  • Total Bandwidth consumption per application
  • Bandwidth consumption per IP address[/ul]
  • Fortigate Newbie

    Fortigate Newbie
    4 REPLIES 4
    hzhao_FTNT
    Staff
    Staff

    Hi there, predefined dataset app-Top-User-by-Bandwidth can do, but you have to create a drill-down chart based on it, please follow attached screenshot.

     

    regards,

    hz

    Fullmoon

    Hi hz,

    appreciate your reply.

    Are you referring to bandwidth-app-Top-Users-By-Bandwidth? under dataset I cant find this "app-Top-User-by-Bandwidth"

    Now if Im going to use bandwidth-app-Top-Users-By-Bandwidth in the Chart Library, under Column 1 Data Binding app is not available similar to yours. pls see attached file. thanks

     

     

     

    Fortigate Newbie

    Fortigate Newbie
    Fullmoon

    @hzhao_FTNT any feedback pls.. thanks

    Fortigate Newbie

    Fortigate Newbie
    hzhao_FTNT

    Hi there, this dataset is from FAZ 5.4+. You can create a custom query as below:

    log type: traffic

    select app, coalesce(nullifna(`user`), nullifna(`unauthuser`), ipstr(`srcip`)) as user_src, sum(coalesce(`sentbyte`, 0)+coalesce(`rcvdbyte`, 0)) as bandwidth from $log where $filter and logid_to_int(logid) not in (4, 7, 14) and nullifna(app) is not null group by app, user_src order by bandwidth desc

     

    Then create a drilldown chart based on it.

     

    regards,

    hz

     

     

    Labels
    Top Kudoed Authors