Skip to main content
Eric_Brown
New Member
June 2, 2016
Solved

cli confusion -- missing settings

  • June 2, 2016
  • 1 reply
  • 6833 views

I'm a little confused about how setting the config from the command line works. Specifically, when I enable router logging, the option disappears from the config. See below:

 

Fortigate (eventfilter) # show
config log eventfilter
    set system disable
    set vpn disable
    set user disable
    set router disable
    set wireless-activity disable
    set wan-opt disable
    set endpoint disable
    set ha disable
end

 

(eventfilter) # set router enable

 

Fortigate (eventfilter) # end

 

Fortigate (eventfilter) # show

config log eventfilter

    set system disable

    set vpn disable

    set user disable

    set wireless-activity disable

    set wan-opt disable

    set endpoint disable

    set ha disable

end

 

Why does this happen? 

 

 

    Best answer by tanr

    Try "show full" or "show full-configuration" instead of just show.

     

    The "show" command doesn't show settings that match the defaults, so since "router enable" is a default setting for "config log eventfilter" it won't be listed with just "show."

    1 reply

    tanr
    tanrAnswer
    New Member
    June 2, 2016

    Try "show full" or "show full-configuration" instead of just show.

     

    The "show" command doesn't show settings that match the defaults, so since "router enable" is a default setting for "config log eventfilter" it won't be listed with just "show."

    Eric_Brown
    New Member
    June 2, 2016

    Thanks. That was easy. :) It's frustrating that I had to post that question here. I feel like most things I can find in the manual -- in fact, I had reviewed the CLI Reference thoroughly before posting. I just did a full-text search of the CLI reference for "show full" and the only thing that came was related to firewalls. I'm sure this is documented somewhere, but I must be looking in the wrong place. Thanks again!

    tanr
    New Member
    June 2, 2016

    Though it does cover a lot, the official documentation could certainly use some refreshing (and grammar checking).

     

    Besides these forums and google, I've found a lot of good tidbits in the book "UTM Security with Fortinet: Mastering FortiOS."  Despite being published in in 2012 it still has a lot of relevant info.