Technical Tip: How to send only selected logs to Syslog server from FortiGate

Navigate to Log & Report -> Log Settings. Under Global Settings, log forwarding to the syslog server can be customized.

Starting from FortiOS v7.6.1, administrators can choose to log local traffic either globally or on a per-policy basis.

In FortiOS v7.2.8+, the per-policy option will not be available.

Run the following commands from the CLI:

config log syslogd filter

    set severity (parameter) 
end

The parameter value can be specified as per requirements, which include, debug, information, notification, warning, error, critical, alert, emergency.

Related article:

Technical Tip: How to configure syslog on FortiGate