Technical Tip: How to export all of the Event logs stored on the FortiManager via FTP/SFTP
Description
This article describes how to make use of the fact that all of FortiManager's Event log files can be exported in a single operation to an FTP/SFTP server.
Scope
FortiManager.
Solution
All newer version i.e. 7.4.10, 7.6.5, etc:
diagnose system export umlog {ftp | sftp} elog <IP> <user> <password> <directory> fmgeventlogs.tgz
Note: If this command does not work, try the commands mentioned below.
Version 5.0 and higher:
diagnose system export umlog {ftp | sftp} locallog <IP> <user> <password> <directory> fmgeventlogs.tgz
Version 4.0 MR2:
diagnose fmsystem export umlog ftp locallog <IP> <user> <password> <directory> fmgeventlogs.tgz
Pre-version 4.0 MR2:
diagnose fmsystem export umlog locallog <IP> <user> <password> <directory> fmgeventlogs.tgz
