Reporter for FortiGate Release Notes

Reporter for FortiGate 1.0.1.36 (2020-04-14)

Fixed issue where a CSV report is always attached when a report is shared via email or scheduled on the Reports tab with all attachment formats unchecked.
Renamed the Device IP and Device Name fields to FortiGate IP and FortiGate Name respectively.
Started work on the VPN Dashboard and VPN section in the IT and Network Security Report

Reporter for FortiGate 1.0.1.35 (2020-03-30)

Reporter for FortiGate 1.0.1.34 (2020-03-18)

Fixed timezone offset issue when loading FortiGate logs available from AT&T’s hosted FortiGate solution.

Reporter for FortiGate 1.0.1.33 (2020-03-11)

Log lines no longer fail to load if they do not include a field called slogtime (only seen in AT&T’s hosted FortiGate solution)

Reporter for FortiGate 1.0.1.32 (2020-03-11)

Fixed an issue that may prevent Search Term Alerts from working after the alerts are edited. If you’re experiencing this issue, edit your Search Term alert, and make sure the filter for Site Resource with the values /s and /su are set to ‘Not equal to’. There was an issue where this portion of the filter would be set to ‘Equal to’ if the alert was edited and saved, preventing the alert from working correctly.
Fixed issue that may result in out of memory issues after startup when the data retention policy attempts to calculate the size of old /closed indexes.
Elasticsearch no longer writes out enormous heap dump files when it runs out of memory. Any existing heap dump files will be deleted when disk space gets low.
Installation now cleans up Elasticsearch package extraction temporary files even if the extract fails.
Fixed issue in Alert Settings where the Alert Evidence Config Table sets example data to ‘User’ after the table is loaded.
Added support for the slightly different FortiGate logs available from AT&T’s hosted FortiGate solution.
Referrer URL is now loaded from the Rawdata field if the referrer field is blank. The Rawdata field is logged if you have `set extended-log enable` on your web filter profiles, and your syslog server is set to ‘reliable’. See the Getting Started Guide for Fastvue Reporter for FortiGate for more information.

Reporter for FortiGate 1.0.1.31 (2020-02-11)

First GA release of Fastvue Reporter for FortiGate.
Improved the logic that decides what columns are displayed in Activity Reports. Fields will no longer have their column removed when using exclude operators if there is also a filter using an include operator for the same field in the filter set.
Search Terms are no longer extracted from resources starting with /cortanaassist/

Fixed issue preventing the Fastvue Reporter service from starting on Server 2008 (non-R2) with certain regional settings.

Improved the calculation of the size of each URL within Fortinet FortiGate sessions.
Improved the extraction of Search Terms to reduce false positives.
Fixed issue preventing the Fastvue Reporter service from starting on systems with certain regional settings (including Portuguese).
Improved performance of Activity Reports.
Report email attachments will no longer be generated if the report contains no data.
Print, Export, and Share buttons are no longer available when a report does not contain data.
Fixed the formatting of TopX widgets in PDF exports.
Running in Demo Mode now populates YouTube videos, YouTube searches and other minor improvements.
New domain substitutes:
- musical.ly now shows as tiktok.com.
- spotifycdn.net now shows as spotify.com.
- dropboxapi.com now shows as dropbox.com.
- d3cv4a9a9wh0bt.cloudfront.net now shows as atlassian.com
- *.nflxso.net now shows as netflix.com

Improved data import performance.
Reported bandwidth sizes are no longer inflated by certain FortiGate event IDs (21, 37141, 39936, 39949).
Fixed further issues with Data Retention that may prevent old data from being deleted from disk.
Fixed report errors that may occur when reporting on large date ranges.
Fixed issue where the Largest Download shown on the Overview Dashboard may not match the Largest Download shown on the Bandwidth Dashboard.
Improved the performance of the Dashboard queries.
When importing syslog data via TCP, any "Connection Forcibly Closed" issues are automatically removed when the syslog connection is re-established.
If email settings are not configured, a prompt is now shown under the email options in Settings | Reports | Scheduled Report.
Improved Demo Data. YouTube URLs no longer show unknown:// as the URL scheme.

Download the latest version from the Fastvue Reporter for FortiGate Download Page. Join the Fastvue Product Testing program to access Fastvue’s latest pre-release products.

Reports can now be shared, exported and scheduled as PDF or CSV, and attached to report notification emails.
When exporting, sharing or scheduling Activity Reports as PDF or CSV, you get the option to export the report with session rows collapsed or expanded.
Improved the format of CSV exports.
Fixed an issue with Search Term detection when URLs are not logged with the correct encoding.
As some log events do not include Source Host, Fastvue Reporter now copies Source Hosts to each subsequent record in the same session after a valid Source Host has been detected.
Fixed issue preventing the 'Retry Report' button that gets displayed when viewing a failed report from working.

Download the latest version from the Fastvue Reporter for FortiGate Download Page. Join the Fastvue Product Testing program to access Fastvue’s latest pre-release products.