Viewing FortiView dashboards

When viewing FortiView dashboards, use the controls in the toolbar to select a device, specify a time period, refresh the view, and switch to full-screen mode.

Many widgets on FortiView dashboards let you drill down to view more details. To drill down to view more details, click, double-click, or right-click an element to view details about different dimensions in different tabs. You can continue to drill down by double-clicking an entry. Click the close icon in the widget's toolbar to return to the previous view.

Many FortiView widgets support multiple chart types such as table view, bubble view, map view, tile view, etc.

In widgets that support multiple views, select the settings icon in the top-right corner of the widget to choose another view.
If sorting is available, there is a Sort By dropdown list in the top-left.
Some widgets have a Show dropdown list in the bottom-right for you to select how many items to display.
To sort by a column in table view, click the column title.
To view more information in graphical views such as bubble, map, or user view, hover the mouse over a graphical element.

Some dashboards require that specific log types are enabled before they can be used. When an ADOM does not include the log type(s) required, the dashboard appears in gray and includes an information icon that indicates what logs must be enabled.

Viewing the threat map

You can view an animated world map that displays threats from unified threat management logs. By default, threats are displayed from all devices in real-time.

The threat map can also be filtered according to your needs. From the toolbar, you can filter threats in the threat map by devices and timeframe. At the top right of the widget, click menu icon > Settings to filter by the threats' source and destination.

When filtering a specific timeframe, the threat map will display in replay mode. In this mode, you can use the play/pause button to watch a replay of the threat map in the selected timeframe. You can adjust the speed of the replay by increasing or decreasing the Replay rate. All threats will appear in the overlay threat window as they occur on the map.

You must specify the longitude and latitude of the device to enable threats for the device to display in the threat map. You can edit the device settings to identify the geographical location of the device in Device Manager. For more information, see Editing device information

To view the threat map in realtime:

Go to FortiView > Threats > Threat Map.
In the timeframe filter, select Realtime.
You can also filter devices from the toolbar. To filter the Source and Destination of the threats, click menu icon > Settings.
In the map, view the geographic location of the threats.
Threats are displayed when the threat level is greater than zero.
- A white line indicates a low threat.
- A yellow line indicates a high threat.
- A red line indicates a critical threat.
In the Threat Window, view the Time, Threat, Severity(Score), Source, and Destination for each threat.

To view the threat map in replay mode:

Go to FortiView > Threats > Threat Map.
In the timeframe filter, select the timeframe to replay in the threat map.
You can also filter devices from the toolbar. To filter the Source and Destination of the threats, click menu icon > Settings.
Once the replay is loaded, it will begin playing automatically.
In the map, view the geographic location of the threats.
Threats are displayed when the threat level is greater than zero.
- A white line indicates a low threat.
- A yellow line indicates a high threat.
- A red line indicates a critical threat.
To adjust the Replay rate, click the minus (-) or plus (+).

All threats will appear in the overlay threat window as they appear on the map.
In the Threat Window, view the Time, Threat, Severity(Score), Source, and Destination for each threat.
To pause the replay, click the pause button.
To resume the replay, click the play button.

The ring around the play/pause button indicates the progress of the replay.