Fortinet FortiAnalyzer 3.0 MR7, Руководство администратора

Страница: 126 / 234

FortiAnalyzer Version 3.0 MR7 Administration Guide
122 05-30007-0082-20080908
Configuring reports Reports
Configuring data filter templates
You can configure multiple data filter templates for reports in Report > Config >
Data Filter . These templates can be applied to any report schedule you want.
Figure 4: Data filter templates
Data filters are configured to sort through and omit specific log information,
enabling you to include or exclude log messages to focus your report on certain
types of log messages that match your criteria. For example, you want to include a
specific range of IP addresses. In the Source(s) field you input the IP addresses
range, 172.20.110.0-255, which will match all IP addresses in the
172.20.110.0/255.255.255.0 or 172.20.120.110/24. If you do not want to match
this specific IP address range, you would enter the IP address range and select
the “not” check box.
Data filter options operate on specific log message fields. For information about
log message fields, see the
FortiGate Log Message Reference .
Create New Select to create a new data filter template and configure its settings.
Delete Select to remove data filter templates whose check boxes are selected.
• To delete one or more data filter templates, select the check box next to
their name, then select Delete.
• To delete all reports, select the column heading check box. All data
filter templates’ check boxes become selected, and then select Delete.
You cannot delete a data filter template if it is already being used by a
report layout or report schedule. If you want to delete a data filter template
that is being used by a report schedule, edit that report layout or report
schedule to unselect the data filter template.
Name Displays the name of the data filter template
Description Displays any comments entered in the Description field when configuring
the data filter template.
Action Select Delete to remove the data filter template.
Select Edit to view or modify the data filter template.