Technical Tip: Enabling config log fortianalyzer override-filter in FortiGate

This article explains how to enable the 'config log fortianalyzer override-filter' command on FortiGate.

This command becomes available only when certain prerequisites are configured in the correct order within a Virtual Domain (VDOM).

To successfully configure the 'config log fortianalyzer override-filter', the following two settings must be enabled in order and within the same VDOM context:

1. 'faz-override 'under the 'config log' setting.

2. status under 'config log fortianalyzer override-setting'.

Once both are enabled, the override-filter configuration becomes available.

Example Configuration:

Enter the target VDOM (e.g., test):

Enable FortiAnalyzer override:

Enable FortiAnalyzer override-setting and specify the server:

The following command becomes accessible:

Verification:

Verify the configuration using the following commands: