Technical Note: Display logs from CLI based on dates
Description
Solution
This article explains how to display logs from CLI based on dates.
Solution
FGT# execute log filter field date
From 1 to 10 values can be specified.
value1 [value2 ... value10] [not]
Use not to reverse the condition.
Each value can be a individual value or a value range.
For value range, "-" is used to separate two values.
Example:
FGT # execute log filter field date "2014-12-25"
FGT # execute log display
402 logs found.
10 logs returned.
1: date=2014-12-25 time=23:43:34 logid=0001000014 type=traffic subtype=local level=notice vd=root srcip=192.168.100.110 srcport=68 srcintf="wan1" dstip=255.255.255.255 dstport=67 dstintf="root" sessionid=1839706 status=accept policyid=0 dstcountry="Reserved" srccountry="Reserved" trandisp=noop service=DHCP proto=17 app="DHCP/DHCP Relay" duration=426 sentbyte=2296 rcvdbyte=0 sentpkt=7 rcvdpkt=0
2: date=2014-12-25 time=22:43:24 logid=0001000014 type=traffic subtype=local level=notice vd=root srcip=192.168.100.110 srcport=68 srcintf="wan1" dstip=255.255.255.255 dstport=67 dstintf="root" sessionid=1835808 status=accept policyid=0 dstcountry="Reserved" srccountry="Reserved" trandisp=noop service=DHCP proto=17 app="DHCP/DHCP Relay" duration=427 sentbyte=2296 rcvdbyte=0 sentpkt=7 rcvdpkt=0
3: date=2014-12-25 time=21:43:30 logid=0001000014 type=traffic subtype=local level=notice vd=root srcip=192.168.100.110 srcport=68 srcintf="wan1" dstip=255.255.255.255 dstport=67 dstintf="root" sessionid=1832091 status=accept policyid=0 dstcountry="Reserved" srccountry="Reserved" trandisp=noop service=DHCP proto=17 app="DHCP/DHCP Relay" duration=424 sentbyte=2296 rcvdbyte=0 sentpkt=7 rcvdpkt=0
4: date=2014-12-25 time=20:43:30 logid=0001000014 type=traffic subtype=local level=notice vd=root srcip=192.168.100.110 srcport=68 srcintf="wan1" dstip=255.255.255.255 dstport=67 dstintf="root" sessionid=1828382 status=accept policyid=0 dstcountry="Reserved" srccountry="Reserved" trandisp=noop service=DHCP proto=17 app="DHCP/DHCP Relay" duration=427 sentbyte=2296 rcvdbyte=0 sentpkt=7 rcvdpkt=0
From 1 to 10 values can be specified.
value1 [value2 ... value10] [not]
Use not to reverse the condition.
Each value can be a individual value or a value range.
For value range, "-" is used to separate two values.
Example:
FGT # execute log filter field date "2014-12-25"
FGT # execute log display
402 logs found.
10 logs returned.
1: date=2014-12-25 time=23:43:34 logid=0001000014 type=traffic subtype=local level=notice vd=root srcip=192.168.100.110 srcport=68 srcintf="wan1" dstip=255.255.255.255 dstport=67 dstintf="root" sessionid=1839706 status=accept policyid=0 dstcountry="Reserved" srccountry="Reserved" trandisp=noop service=DHCP proto=17 app="DHCP/DHCP Relay" duration=426 sentbyte=2296 rcvdbyte=0 sentpkt=7 rcvdpkt=0
2: date=2014-12-25 time=22:43:24 logid=0001000014 type=traffic subtype=local level=notice vd=root srcip=192.168.100.110 srcport=68 srcintf="wan1" dstip=255.255.255.255 dstport=67 dstintf="root" sessionid=1835808 status=accept policyid=0 dstcountry="Reserved" srccountry="Reserved" trandisp=noop service=DHCP proto=17 app="DHCP/DHCP Relay" duration=427 sentbyte=2296 rcvdbyte=0 sentpkt=7 rcvdpkt=0
3: date=2014-12-25 time=21:43:30 logid=0001000014 type=traffic subtype=local level=notice vd=root srcip=192.168.100.110 srcport=68 srcintf="wan1" dstip=255.255.255.255 dstport=67 dstintf="root" sessionid=1832091 status=accept policyid=0 dstcountry="Reserved" srccountry="Reserved" trandisp=noop service=DHCP proto=17 app="DHCP/DHCP Relay" duration=424 sentbyte=2296 rcvdbyte=0 sentpkt=7 rcvdpkt=0
4: date=2014-12-25 time=20:43:30 logid=0001000014 type=traffic subtype=local level=notice vd=root srcip=192.168.100.110 srcport=68 srcintf="wan1" dstip=255.255.255.255 dstport=67 dstintf="root" sessionid=1828382 status=accept policyid=0 dstcountry="Reserved" srccountry="Reserved" trandisp=noop service=DHCP proto=17 app="DHCP/DHCP Relay" duration=427 sentbyte=2296 rcvdbyte=0 sentpkt=7 rcvdpkt=0
