Technical Tip: FortiAnalyzer Cloud is not Receiving Logs from EMS, FortiClient and FortiMail

Description

This article explains a common scenario in which FortiAnalyzer Cloud ignores log messages from EMS, FortiClient, and FortiMail, despite these products being listed as 'supported platforms'.

Scope

FortiAnalyzer Cloud.

Solution

The base FortiAnalyzer Cloud entitlement supports only FortiGates, with log limits as per this document: Logging support and daily log limits.

At least one additional storage license (i.e. FC1-10-AZCLD-463-01-DD) is required to enable FortiAnalyzer Cloud to receive logs from EMS, FortiClient, and FortiMail.

To confirm the correct entitlement, go to Asset Management -> Account Services:

Related article:

Technical Tip: FortiGate connected to FortiAnalyzer but configuration is deny