All Apps and Add-ons

Splunk for Fortinet FortiOS 5: How oto get the Traffic Dashboard to resolve a hostname for the destination IP address?

Monkey101
New Member

I am struggling to get the Traffic Dashboard to resolve a hostname for the destination IP address.
Is anyone able to assist with a solution for this?

0 Karma

open3s
Explorer

Hi,
We've just added a new version of the app. Please check if this solves your issues.
Thanks,
Open3S.

0 Karma

splunker12er
Motivator

No, its not solved yet

0 Karma

satishsdange
Builder

Could you please share sample logs & search, you are using.

0 Karma

splunker12er
Motivator
search source_ip="*" destination_ip="*" destination_port="*" user="*" device_name="*" application="*" sourcetype="fortios5_traffic" | fillnull device_name vdom source_interface source_ip user group destination_interface destination_ip session_type destination_port application service action policy_id bytes_sent bytes_received destination_country | stats count by device_name vdom source_interface source_ip user group destination_interface destination_ip session_type destination_port application service action policy_id bytes_sent bytes_received destination_country _time

where source_ip,destination_ip,destination_port fields are not yet extracted by the sourcetype "fortios5_traffic" ?

0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...