Fortinet black logo

Administration Guide

Reports

Reports

Reports in Log & Reports show a list of audit reports generated to comply with audit requirements. The reports include:

  • User Login: Top successful logins, top failed logins, and top failed logins by reason.

  • System: Maintenance mode, top maintenance mode activation by user, glass breaking mode, top glass breaking mode activation by user, and HA mode.

  • Secret (includes the following):

    • Secret launch success

    • Top secret launch success by secret name

    • Top secret launch success by secret name and user

    • Password change

    • Top successful password change by secret name

    • Top successful password change by secret name and user

    • Top failed password change by secret name

    • Top failed password change by secret name and reason

    • Top failed password change by secret name, user and reason

    • Password verification

    • Top successful password verification by secret name

    • Top successful password verification by secret name and user

    • Top failed password verification by secret name

    • Top failed password verification by secret name and reason

    • Top failed password verification by secret name, user and reason

    • Clear text view

    • Top clear text view by secret name

    • Top clear text view by secret name and user

For each report; name, data start, data end, and the size are displayed.

The Reports tab contains the following options:

Download

Select to export the selected report to your computer as a pdf file.

View

Select to view the selected report.

Delete

Select to delete the selected reports.

Generate Now

Select to regenerate a report and click OK in the Confirm window.

Regenerating a report may take several minutes.

Report Schedule

Select to schedule a generating a report.

See Schedule generating reports.

Schedule generating reports

To schedule generating a report:
  1. Go to Log & Report > Reports and select Report Schedule.

    The Report Schedule dialog opens.

  2. In Generate Report, select from the following two options:
    1. Recurring: Select to generate reports periodically.
    2. On demand: Select to generate reports on demand.
  3. In Schedule, select either Daily or Weekly:
    1. Daily: Enter the time or select the clock icon and then select the time from the dropdown.
    2. Weekly: Enter the time or select the clock icon and then select the time from the dropdown.

      In the Day dropdown, select a day of the week.

      Note: Schedule is only available when Generate Report is set as Recurring.

  4. Enable Email Generated Reports and enter the recipient email addresses where the reports are sent.

    Before enabling the option, you must configure an email messaging server in System > Settings and configure a username in Email Alert Settings.

    See Email alert settings.

    Note: The option is disabled by default.

  5. Click OK.

Customizing reports

FortiPAM allows you to customize reports to display attributes according to your preference.

You can change the report attributes from the CLI console only.

CLI configuration to customize report attributes example

config report layout

edit default

config body-item #Configure report body items.

show #By default, a report displays all the available charts.

delete 301 #Deletes Bandwidth and Application related charts.

end

end

execute report-config reset

y #Enter "y" to update the report layout based on the new configuration.

Reports

Reports in Log & Reports show a list of audit reports generated to comply with audit requirements. The reports include:

  • User Login: Top successful logins, top failed logins, and top failed logins by reason.

  • System: Maintenance mode, top maintenance mode activation by user, glass breaking mode, top glass breaking mode activation by user, and HA mode.

  • Secret (includes the following):

    • Secret launch success

    • Top secret launch success by secret name

    • Top secret launch success by secret name and user

    • Password change

    • Top successful password change by secret name

    • Top successful password change by secret name and user

    • Top failed password change by secret name

    • Top failed password change by secret name and reason

    • Top failed password change by secret name, user and reason

    • Password verification

    • Top successful password verification by secret name

    • Top successful password verification by secret name and user

    • Top failed password verification by secret name

    • Top failed password verification by secret name and reason

    • Top failed password verification by secret name, user and reason

    • Clear text view

    • Top clear text view by secret name

    • Top clear text view by secret name and user

For each report; name, data start, data end, and the size are displayed.

The Reports tab contains the following options:

Download

Select to export the selected report to your computer as a pdf file.

View

Select to view the selected report.

Delete

Select to delete the selected reports.

Generate Now

Select to regenerate a report and click OK in the Confirm window.

Regenerating a report may take several minutes.

Report Schedule

Select to schedule a generating a report.

See Schedule generating reports.

Schedule generating reports

To schedule generating a report:
  1. Go to Log & Report > Reports and select Report Schedule.

    The Report Schedule dialog opens.

  2. In Generate Report, select from the following two options:
    1. Recurring: Select to generate reports periodically.
    2. On demand: Select to generate reports on demand.
  3. In Schedule, select either Daily or Weekly:
    1. Daily: Enter the time or select the clock icon and then select the time from the dropdown.
    2. Weekly: Enter the time or select the clock icon and then select the time from the dropdown.

      In the Day dropdown, select a day of the week.

      Note: Schedule is only available when Generate Report is set as Recurring.

  4. Enable Email Generated Reports and enter the recipient email addresses where the reports are sent.

    Before enabling the option, you must configure an email messaging server in System > Settings and configure a username in Email Alert Settings.

    See Email alert settings.

    Note: The option is disabled by default.

  5. Click OK.

Customizing reports

FortiPAM allows you to customize reports to display attributes according to your preference.

You can change the report attributes from the CLI console only.

CLI configuration to customize report attributes example

config report layout

edit default

config body-item #Configure report body items.

show #By default, a report displays all the available charts.

delete 301 #Deletes Bandwidth and Application related charts.

end

end

execute report-config reset

y #Enter "y" to update the report layout based on the new configuration.