[PDF] fortianalyzer admin guide 6.2

What can I do with fortianalyzer?

In interactive labs, students will explore administration and management; register devices for log collection with FortiAnalyzer; use FortiAnalyzer to centrally collect logs; perform a forensic analysis of logs based on simulated network attacks; create reports; and explore solutions to common misconfiguration issues.

How do I configure fortianalyzer to work with security fabric devices?

The FortiAnalyzer serial number is verified. Enter a Fabric name. Ensure Allow other Security Fabric devices to join is enabled. Select the interfaces that will be listening for device join requests.

How do I add a device to a fortianalyzer event log?

Specify: To add devices, click the Add icon. Local Device: Select if the event handler is for local FortiAnalyzer event logs. This option is only available in the root ADOM and is used to query FortiAnalyzer event logs. For Local Device, the Log Type must be Event Log and Log Subtype must be Any.

How do I enable/disable fortianalyzer?

To enable or disable the FortiAnalyzer features from the GUI: Go to System Settings > Dashboard. In the System Informationwidget, click the FortiAnalyzer Featurestoggle switch. The FortiManager will reboot to apply the change. To enable or disable the FortiAnalyzer features from the CLI: Log in to the FortiManager CLI.