Technical Tip: Configure FortiAnalyzer logging settings per VDOM

To enable the FortiAnalyzer logging per VDOM.

config vdom
    edit <Vdom_name>
        config log setting
            set faz-override enable
    end

After running the above command in the VDOM, the option to configure the FortiAnalyzer logging on the CLI will be provided for that particular VDOM:

config log fortianalyzer override-setting
    set status enable
    set server "x.x.x.x" <----- x.x.x.x is the IP address of the FortiAnalyzer.
    set reliable enable
end

Note:

FortiAnalyzer must be reachable from the VDOM.

To disable the FortiAnalyzer logging on a particular VDOM, follow the command below:

config vdom
    edit <Vdom_name>
        config log setting
            set faz-override disable
    end