Technical Tip: Configuring scheduled email local report

Before configuring the local reports, it needs to be enabled from System -> Feature Visibility -> Local Reports.

The local Reports tab will now be available under Log & Reports -> Local Reports.

To configure the scheduled email report:

1. Use Fortinet's default SMTP server. 

The commands below should be executed in a global VDOM:

config system email-server
    set server "fortinet-notifications.com"
    set port 465
    set security smtps
end

Note:

Starting from v7.4.4, the default email server has been switched from notification.fortinet.net to fortinet-notifications.com. This default server is only available to registered devices with an active FortiCare support contract. The reply-to field in the source email is automatically updated to DoNotReply@fortinet-notifications.com for all servers, including custom ones.

2. Configure the sender address for alert emails.
   
   

   config alertemail setting
       set username "DoNotReply@fortinet-notifications.com"   --> If using default SMTP server.
   end

    

3. Configure report schedule in Log & Report -> Local Reports -> Report Schedule.  

If the email is not received, troubleshooting will be based on Troubleshooting Tip: Email alert

1. Run the alertmail debug:

diagnose debug reset
diagnose debug disable

diagnose debug console timestamp enable
diagnose debug application alertmail -1

diagnose debug enable

2. In Log & Report -> Local Reports -> Generate Now.

When using the default Fortinet SMTP server, the email alert debug log may indicate that the email was sent successfully, even if the email is not received:

2024-09-02 12:16:15 <== send mail success, m = 0x963e590 s = 0x9640380

In such cases, verify that the username under the alert email settings is correctly set to 'DoNotReply@fortinet-notifications.com' as this setting is required for proper operation when using the default SMTP server.

Note:

Local reports are only available on FortiGates that have local disk storage.