Skip to main content
Solved

How can i get Fortianalyzer details from fortinet firewall ?

  • February 20, 2025
  • 1 reply
  • 64 views

Forum|alt.badge.img+2

Team,

 

i am collecting frtianazlyer data from fortinet firewall via custom command , however i tried below query to get the data .

 

pattern_faz =

  ```

config log fortianalyzer setting

  set status enable

    set server {faz:string}

   

 

```;

foreach device in network.devices

/* where device.platform.vendor == Vendor.FORTINET */

  let outputs = device.outputs

foreach command in outputs.commands

   where command.commandType == CommandType.CUSTOM

   where command.commandText == "show  log fortianalyzer setting"

  let configurations = parseConfigBlocks(OS.FORTINET, command.response)

 

foreach match in blockMatches(configurations, pattern_faz)

/* where !matches(device.name, "*_*") */

 

select {

  deviceName: device.name,

  SiteName: device.locationName,

  "Primary DNS": match.data.faz,

}

 

 

 

but unfortunatelly i m getting zero result. can anyone help on this

Best answer by Rohit_809 Kumar

the pattern was wrong in above query , i updated pattern , now its working for me.

 

Working Pattern 

pattern_faz =

  ```

config log fortianalyzer setting

    set server {faz:string}

   

 

```;

1 reply

Forum|alt.badge.img+2
  • Author
  • Spotter
  • Answer
  • February 21, 2025

the pattern was wrong in above query , i updated pattern , now its working for me.

 

Working Pattern 

pattern_faz =

  ```

config log fortianalyzer setting

    set server {faz:string}

   

 

```;