Troubleshooting Tip: Unable to find logs related to proxied traffic on FortiGate
Description
This article describes the issue of not being able to find logs related to proxied traffic on FortiGate, despite having 'log all' configured on the redirect rule and the proxy rule. The article provides a step-by-step guide to troubleshoot and resolve the issue.
Scope
FortiGate, FortiAnalyzer, FortiManager.
Solution
To troubleshoot the issue of not being able to find logs related to proxied traffic on FortiGate, follow the steps below.
Check if the traffic is flowing and being permitted correctly.
Run the following command and review the output.
diagnose debug flow filter addr <client-ip>Verify if the proxy policy logs are being generated.
Go to Log & Report -> Forward Traffic and filter by policy type = proxy-policy.
Check if the logging daemon is receiving events.
Run the following command and review the output.
diagnose debug application miglogd -1If the issue persists, apply a web-filter profile with URL logging to the proxy rule to capture detailed per-request logs.
Note: On FortiOS v7.4, an accepted proxied session is logged on a per-connection basis and does not include the requested URL. Detailed per-request logs, including the URL, HTTP method, and status code, are only available in FortiOS v7.6 and later.
