View

The View tab displays information about the security event logs. It contains filters and controls that allow you to group the event logs in different ways, and to drill down and view the details of a related set of event logs.

The following action buttons are available along the top of the page:

• Application/Attack/Sandbox/VPN—view the event logs grouped by application, attack, sandbox, or VPN.
• Scope—view output for all sites or select a specific site
• Set Filter—filter the data (last 5 minutes, last 30 minutes, last 60 minutes, last 4 hours, last 12 hours, last 1 day, last 7 days, or specify)
• Refresh—refresh the data
• Sort—Each column has a sorting feature, allowing you to sort data in ascending or descending order.

The table header provides a dropdown menu for selecting the number of entries to display.

After you select Application, Attack, Sandbox, or VPN you can select how to sort the event logs.

The following tabs provide different views of the data:

• Application—arranged by application. See Application view.
• Attack—arranged by attack. See Attack view.
• Sandbox—arranged by sandbox. See Sandbox view.
• VPN— arranged by VPN. See VPN view.
• Source—arranged by the source FortiGate device.
• Destination—arranged by the destination (IP address, protocol, port).