Technical Tip: How to check FortiGate upgrade events logs

It is possible to filter the log to check when FortiGate is getting upgraded.

From GUI, go to Logs & Reports -> System Events -> General System Events -> Add Filter -> Filter Field: Log Description = Device rebooted.

To check logs in the CLI: 

execute log filter reset

execute log filter device 0     <----- Pulling logs from Memory.

execute log filter category 1

execute log filter field logdesc Device\ rebooted

execute log display

Note:

Every reboot log does not indicate the firmware upgrade, check the message in rebooted logs that show 'The reason is upgrade firmware'.

In log, it is possible to check what version FortiGate is on and what version is upgraded.

From GUI, go to Logs & Reports -> System Events -> General System Events -> Add Filter -> Filter Field: Log Description = Image restored.

For more information about viewing logs in the CLI, refer to Technical Tip: Displaying logs via FortiGate's CLI.