Technical Tip: How to enable the upload Logs and Reports to the FTP server in FortiAnalyzer

In FortiAnalyzer, except for using the following commands to back up Logs and Reports to the FTP server, there are other options that can be enabled to upload Logs and Reports to the FTP server.

CLI commands to back up Logs and Reports:

• To back up both logs and associated DLP archive files:

execute backup logs <device name(s)| all> <ftp/sftp/scp> <ip> <user name> <password> <directory> 

• To back up logs only:

execute backup logs-only <device name(s)| all> <ftp/sftp/scp> <ip> <user name> <password> <directory> 

• To back up Reports:

   execute backup reports <report name or all> <ftp/sftp/scp> <ip> <user name> <password> <directory>

Another option to enable uploading logs to the FTP server:

On FortiAnalyzer GUI, go under System settings -> Advanced -> Device Log Settings and enable the 'upload logs using a standard file transfer protocol' option.

Enable upload reports to the FTP server:
Create an Output Profile under the FortiAnalyzer GUI -> Reports -> Advanced -> Output Profile, and enable 'Upload Report to Server'.

On the report settings, enable 'Enable Notification' and select the Output Profile with the enabled 'Upload Report to Server' option.

Troubleshooting:

The following CLI commands can be run before starting back up to the FTP/SFTP server:

   diagnose debug app curl -1 -> Enable debugging output for the curl application module.

   diagnose debug enable

Related documents:

Technical Tip: Backup and restore of FortiAnalyzer settings, logs and reports

Configuring rolling and uploading of logs using the GUI

Creating output profiles

Technical Tip: FortiAnalyzer configuration backup towards remote server

backup