A dataset in FortiAnalyzer is fundamentally a structured SQL query that retrieves specific information from the FortiAnalyzer database. Its primary purpose is to define what data is fetched for use in reports. When creating custom reports, administrators build or use pre-defined datasets to query for the exact log data needed, such as top applications by bandwidth or failed authentication attempts. This retrieved data is then used by charts and macros to generate the visual and tabular elements of a report.

B: The visual presentation, structure, and branding of a report, such as the cover page, headers, and footers, are controlled by report layouts, not datasets.

C: This is an indirect and less precise description. While datasets provide the data for charts within templates, their core function is the retrieval of data (the query), not the setting of data in a template.

D: Chart definitions determine the visualization type (e.g., pie, bar, table) and which dataset to use for data, but the dataset itself does not define the chart's appearance.

1. FortiAnalyzer Administration Guide 7.4

Page 278

Section: "Reports > Charts

datasets

and macros > Datasets".

The guide states: "Datasets are SQL queries that retrieve specific information from the FortiAnalyzer database. You can create custom datasets to query the database for specific information that you want to include in a report." This directly supports that datasets determine what data is retrieved.

2. FortiAnalyzer Administration Guide 7.4

Page 278

Section: "Reports > Report templates

layouts

and settings > Layouts".

The guide explains: "Layouts are used to customize the look of your reports

including the report cover page

header

and footer." This differentiates layouts (Option B) from datasets.

3. FortiAnalyzer Administration Guide 7.4

Page 278

Section: "Reports > Charts

datasets

and macros > Charts".

The guide notes: "Charts are used to graphically represent the data that is collected by FortiAnalyzer... When you create a chart

you can specify the chart title

the dataset

the type of chart..." This confirms that charts define the visualization type (Option D) and use datasets for their data.