Can diagnose debug application output be forwarded externally? (FortiAnalyzer / syslog / API)

Hi all,

We are building an automated pipeline to continuously collect SSL-VPN and IPSec debug logs from our FortiGate 90G devices, using:

diagnose debug application sslvpn -1
diagnose debug application fnbamd 8
diagnose debug enable

We specifically need the raw debug output (e.g. "SSL established: TLSv1.3 TLS_AES_256_GCM_SHA384") which is not present in structured logs and therefore not available via FortiAnalyzer or syslog.

We have already gone through the following KB articles:
• Continuous debug monitoring with Bash and Crontab:
https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Continuous-debug-monitoring-with-Bash-and-Crontab/ta-p/305973

• FortiGate remote monitoring and logging CLI command output into a file:
https://community.fortinet.com/t5/FortiGate/Configuration-Example-FortiGate-remote-monitoring-and-logging/ta-p/189892

Based on our research, it appears that the debug subsystem and the structured logging pipeline are architecturally separate, the raw output of diagnose debug application commands streams only to the active CLI session, with no native way to route it to FortiAnalyzer, syslog, or any REST API endpoint.

Our current workaround is an automated SSH capture script, which works but feels like it should not be necessary.

Our questions:
1. Is there any supported method in FortiOS (any version) to natively forward diagnose debug output to an external destination?
2. Is there any roadmap for this capability?
3. Has anyone found a more elegant solution than SSH capture?

Thanks in advance.