Troubleshooting Tip: Local traffic logs tab shows no results
Description
This article describes how to resolve an issue where local traffic logs are not visible under Logs & Reports and the page shows the message 'No results'.
Scope
FortiGate.
Solution
Identify exactly where logs are displayed from in the unit.
Enable the option and verify the logs.
set local-traffic enable
end
set local-traffic enable
end
config log fortiguard filter
set local-traffic enable
end
Additionally, make sure to enable the following options in log settings.
set local-in-allow enable <----- Show logs for traffic designated to FortiGate such as ping, management.
set local-out enable <----- Show logs of traffic generated from FortiGate.
end
Note:
If per-policy local-in traffic logging is enabled, the allowed traffic, denied unicast traffic, and denied broadcast traffic logging do not need to be configured for the log settings. When traffic logging is enabled for the local-in policy, the denied unicast traffic and denied broadcast traffic logs will be included.
As of v7.6, Local Traffic Logging can be enabled on a Local-in Policy basis. This will allow more granular control over target logging on specific Local-in policies. In turn, this will reduce over-generalized logging.
config log setting
set local-in-policy-log {enable | disable}
end
In GUI:
Navigate to Logs & Report -> Log Settings -> Global Settings -> Local traffic Logging -> Specify -> Log local-in traffic and choose Per Policy.
config firewall local-in-policy
edit <id> <----- Point to the specific Local-in policy in question.
set logtraffic {enable | disable}
end
end
In the GUI:
Navigate to Policy & Objects -> Local-In Policy, choose the appropriate policy -> Edit, and enable Log violation traffic.
Related documents:
