Technical Tip: How to Gather FortiEDR Collector Logs Locally
| Description | This article describes how to gather collector logs when it is disconnected or not shown in the console for Windows, OSX, and Linux. |
| Scope | FortiEDR Collector Logging 5.0+ |
| Solution | For Windows: Open the Command Prompt as Administrator Run the following command:
"C:\Program Files\Fortinet\FortiEDR\FortiEDRCollectorService.exe" --support
%TEMP%\program_data_archive_support.zip
Upload to the case in FortiCare.
For macOS:
/Applications/FortiEDR.app/FortiEDRCollector --support
For v6.0+ execute the command:
sudo /Applications/FortiEDR.app/Contents/MacOS/FortiEDRCollector.app/Contents/MacOS/FortiEDRCollector --support
For Linux:
/opt/FortiEDRCollector/bin/FortiEDRCollector --support |
