Skip to main content
ycho
Staff
Staff
June 9, 2022

Technical Tip: How to import FortiGate log downloaded in GUI to FortiAnalyzer log view

  • June 9, 2022
  • 0 replies
  • 3245 views
Description This article describes a way to import FortiGate log downloaded in GUI to FortiAnalyzer Log View.
Scope FortiGate.
Solution

Download logs in FortiGate GUI (the format of the log file is .log). 

 

ycho_0-1654756231579.png

 

Select the 'import' button and Import the log file to FortiAnalyzer Log Browse.

 

ycho_1-1654753223724.png

 

Note:

With recent format changes, the file should be renamed with the below format before it can be imported:
'[Firewall_Serial_Number].[VdomName].[tlog].[Date].[Timestamp].log'.

For instance'

FGTXXXXXXXXXX034.root.tlog.20250727_020000'.

 

Check the imported log file (tlog.165xxx.log.gz).

 

ycho_2-1654753466826.png

 

To see the logs in the Log view, run the DB rebuilding (it requires the reboot process).

 

ycho_3-1654753543103.png

 

Rebuilding status can be checked in the upper right corner.

 

ycho_4-1654753728648.png

 

Then, check the logs in the Log View menu.

 

Related article:

Technical Tip: Transferring historical logs from a FortiGate hard disk to a FortiAnalyzer

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.