Grafana MarketplaceCommercial Plugin

FortiGate Plugin for Grafana

Monitor FortiGate in Grafana

Get the Plugin Talk to an Expert

Built for

FortiGate data categories

Monitoring views

Unified Grafana data source

Agents or exporters required

Overview

Monitor FortiGate firewalls directly inside Grafana

Firewall traffic visibility

Security & threat logs

System operations

FortiOS REST API

The FortiGate plugin is a backend data source plugin that enables on-demand querying and visualization of FortiGate security logs and monitoring data inside Grafana panels, using the native FortiOS REST API. Security teams get firewall traffic, threat, and system visibility in the same dashboards they already use for the rest of their stack.

FortiGate is Fortinet's next-generation firewall and unified threat management platform, covering firewall, antivirus, intrusion prevention, web filtering, anti-spam, and VPN. Its devices generate rich security logs across network traffic, security events, and system operations. The plugin brings those logs into Grafana so teams can detect, analyze, and respond to intrusion attempts, policy violations, and suspicious network activity from a single pane of glass.

Coverage

What Can You Monitor

The plugin queries three FortiGate log categories through the FortiOS REST API, selectable by event type and subtype in the query editor.

01 — Traffic

Traffic Logs

Analyze network traffic across forward, local, multicast, sniffer, FortiView, and threat subtypes. Surface traffic by action, protocol, service, top source and destination IPs and ports, and total bytes sent and received.

ForwardLocalMulticastFortiViewThreat

02 — UTM

UTM Logs

Monitor antivirus activity across scanned, clean, infected, suspicious, zero-hour, and file-hash checks, alongside real-time webfilter monitoring of malicious and trusted URLs.

AntivirusWebfilterInfectedZero-hourURLs

03 — Events

Event Logs

Track system and administrative activity across VPN, user, router, wireless, endpoint, HA, compliance, security-rating, connector, and system subtypes. Analyze severity, status, action, and active users.

VPNUserEndpointHASystem

Pre-Built Dashboards

Three ready-to-use FortiGate dashboards

The plugin ships three pre-built dashboards, each with template variables for datasource, storage type, and subtype, so teams get value without building panels from scratch.

1 / 2

Data Source Configuration

Enter your FortiGate connection details and credentials, then Save & test to connect Grafana to your FortiGate environment.

Query Editor

Use template variables for datasource, storage type, and subtype to build queries with a guided editor.

Differentiators

Why Crest Data's FortiGate Plugin?

Native & Agentless

Talks directly to the FortiOS REST API with a bearer token from the Go backend. No agents, no exporters, no extra collection layer to deploy or maintain.

Full Log Coverage

Queries Traffic, UTM (antivirus statistics and webfilter), and Event logs across every FortiGate subtype, from forward traffic and threats to VPN, user, router, and system events.

Flexible Storage Sources

Query logs from Disk (historical), Memory (real-time), or FortiCloud, so teams can move between live monitoring and long-range investigation without changing tools.

Advanced Filtering

A powerful filter syntax with match, contains, comparison, and logical operators (==, !=, =@, !@, <=, <, >=, >, AND, OR) lets analysts drill into exactly the events that matter.

Built for the FortiOS API

Automatic pagination for large datasets (5000 records per chunk) with session continuity, rate-limit compliance (100 requests per minute), and retry with exponential backoff for transient failures.

Fast Time-to-Value

Ships with three pre-built dashboards for Traffic, Events, and UTM, so teams get immediate insight into network security data without building panels from scratch.