Can I filter FortiGate's syslog setting

Forum|Forum|6 years ago
April 7, 2020
2 replies
4296 views

I have used the FortiGate for SSL-VPN only. I would like the fortiGate send only log "User access Fortigate and User login SSL-VPN". to a syslog. What should I do?

Details

FortiGate 101F

Firmware 6.2.3

Best answer by jhouvenaghel_FTNT

If you know the logid of these particular events then you should be able to use :

set filter "logid(id1,id2, ..)" with filter-type = include (under config log syslogd filter)

ede_pfau

SuperUser

IMHO, receive all event logs and filter on your syslog server.

jhouvenaghel_FTNTAnswer

Staff

If you know the logid of these particular events then you should be able to use :

set filter "logid(id1,id2, ..)" with filter-type = include (under config log syslogd filter)

Sign up

Login with SSO

Login to the community

Login with SSO