Skip to main content
ssteo
Staff
Staff
September 29, 2022

Technical Tip: How to view Security Event logs on FortiGate

  • September 29, 2022
  • 0 replies
  • 1045 views
Description This article describes how to view Security Event logs on FortiGate.
Scope FortiGate.
Solution

On v7.0.x and below, Antivirus, Web Filter, SSL, DNS Query, File filter, Application Control, Intrusion Prevention, and Anomaly log are visible under Log & Report.

 

ssteo_0-1664430328982.png

 

Starting from v7.2.x, Antivirus, Web Filter, SSL, DNS Query, File filter, Application Control, Intrusion Prevention, and Anomaly logs can be found under Log & Report -> Security Events -> Summary/ Log.

 

Onthe  summary page, it will show Top Category, Action, and Count.

 

ssteo_1-1664430342340.png

 

To view the log, choose 'Logs' on top and it will redirect to the logs page.

 

ssteo_2-1664430356559.png

 

To view logs in the CLI, refer to this article: Technical Tip: Displaying logs via FortiGate's CLI.

If no logs are seen, ensure that logging is set to 'Security Events' or 'All sessions' in the policy being used:

 

logtraffic.PNG
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.