Custom Data set and Chart for FortiMail

[Samehatef]

Hello

Can anyone assist or provide a custom data set and chart for fortimail to provide a custom report containing fields like source ip, destination ip, source mail, destination mail, subject mail, action ..... etc for all users ?

[brazz_FTNT]

Hello , 

Let's try below dataset:

SELECT `src` AS Source_IP, `dst_ip` AS Destination_IP, `from` AS Source_Mail, `to` AS Destination_IP, `subject` AS Subject_Mail, `disposition` AS Action_Taken, `client_name` AS Users

FROM $log

WHERE $filter

Unfortunately, I do not have any FortiMail logs available to verify my dataset 

Please check and let me know if it works. 

Also I would suggest to review these :

+[link=https://docs.fortinet.com/uploaded/files/2755/fortimail-log-message-reference-600.pdf]FortiMail® Log Message Reference[/link] +FortiMail Administration Guide

Cheers

[abelio]

Hello Brazz,

Just modifying  SELECT `src`  AS SOURCE_IP,...   with SELECT `client_name`  AS SOURCE_IP  .... taken over History logs and we'll haver a nice dataset to start with.

thanks