Skip to main content
VBNA
VBNA
New Member
January 15, 2025
Solved

Configuration Backup Event Log Entry Missing

  • January 15, 2025
  • 2 replies
  • 698 views

We are trying to set up notifications (via automation stiches) of system configuration backups.  The automation stiches appear to support this as they have entries for the relevant log events (32142 and possibly 32145) but for whatever reason, our FortiGates are not recording the backup events in the event log.  The log setting for "Event logging" is set to "All."

 

We can find no other place either in the GUI or CLI reference material that would indicate any other setting to enable the expected functionality.

 

Does anyone have any insight into why the backup events are not being recorded in the event log?

The models in question are 100F, 80F, 60F and firmware versions 7.6.0, 7.6.1, and 7.2.10.

Best answer by VBNA

From what we've been able to determine, event log entries are made for backups as follows:

1 - When doing a manual config backup and download, event ID 32145 is recorded indicating that the configuration was downloaded, but it doesn't really mention the backup itself.

2 - When doing an automated config backup using the Automation Stitch feature, event ID 32142 is recorded noting that a backup was made.

3 - When the FortiGate Cloud service's backup automation feature performs the backup, no entry of any kind is logged in the FortiGate's event log. (It would be really nice if this also triggered a recording of event 32142 or its own dedicated log ID within the FortiGate.)

2 replies

AEK
SuperUser
AEK
SuperUser
January 15, 2025

I have FOS 6.2.16 and I confirm there is no such log entry when I run config backup.

AEK
VBNA
VBNAAuthorAnswer
New Member
January 28, 2025

From what we've been able to determine, event log entries are made for backups as follows:

1 - When doing a manual config backup and download, event ID 32145 is recorded indicating that the configuration was downloaded, but it doesn't really mention the backup itself.

2 - When doing an automated config backup using the Automation Stitch feature, event ID 32142 is recorded noting that a backup was made.

3 - When the FortiGate Cloud service's backup automation feature performs the backup, no entry of any kind is logged in the FortiGate's event log. (It would be really nice if this also triggered a recording of event 32142 or its own dedicated log ID within the FortiGate.)

    Terms & ConditionsAccessibility statement