Fortinet FortiAnalyzer-100A, Руководство администратора

Страница: 147 / 162

Network Analyzer Log rolling
FortiAnalyzer Version 3.0 MR3 Administration Guide
05-30003-0082-20060925
147
Search tips
The FortiAnalyzer search feature includes a robust search index that enables you
to find any information by including specific information in your search criteria.
Consider the following when searching the logs:
• The search is case-insensitive, that is, case is not considered.
• Use the “*” character as a wild card. For any partial term or IP address, enter
as much as you can and use the “*” to search on all terms related to what you
entered.
• You can search for IP ranges, including subnets. For example:
• 172.20.110.0-255 matches all IP addresses in the
172.20.110.0/255.255.255.0 or 172.20.110.0/24 subnet
• 172.20.110.0-140.255þ matches all IP addresses from 172.20.110.0 to
172.20.140.255
• 172.16.0.0-20.255.255 matches all IP addresses from 172.16.0.0 to
172.20.255.255)
Printing the search results
The FortiAnalyzer unit enables you to produce a hard copy of the results of a
search, which you can email, save to a local hard disk or print.
After completing a search, the results include a Printable Version link. Select the
link to create an HTML version of the results.
Log rolling
Log rolling is a way to control the network traffic log file size and space used on
the FortiAnalyzer hard disk. You can configure the frequency of the log rolling and
what to do with the network traffic
log file when rolled.
Search Select to begin searching the logs
Basic search Select to return to the basic search.
Find results with all
of the words Enter the keywords you want to use in your search. The
FortiAnalyzer search engine will return all network traffic log
entries that contain all keywords entered. Separate keywords with
a space.
Find results with at
least one of the
words Enter all the keywords you want to use in your search. The
FortiAnalyzer search engine will return all network traffic log
entries that contain one or more of the keywords. Separate
keywords with a space.
Find results without
the words Enter the keywords that you do not want included in your search
results. If a network traffic log entry contains the keywords you are
searching on and includes a keyword from this field, the log entry
will not be included in the search results.
Return log entries
dated within Select a time frame of the log entries to search within.