Skip to main content
Tril
Tril
New Member
February 23, 2025
Question

Download logs in the backround/prepare raw logs in FortiAnalyzer

  • February 23, 2025
  • 3 replies
  • 1259 views

Hello,

I want to export logs for specific policy IDs and download the logs to then run a script over it.

My problem is the following: The FAZ is unbearably slow. If I download the logs via "Log View-->FortiGate-->Filter with Policy ID --> download txt " It takes eons to prepare the logs before I can download them. At first its quite fast and then it slows down, to about 20-40 Logs/second. 

For Log Files that hit the 100k Log cap, this takes a long time. I have to move the cursor every few minutes as well so that my session doesnt expire. 

 

Is it possible to let this log preperation happens in the backround so I can come back and just download it instantly?
Or should I use the raw logs from "Log Browse" with EVERY Policy ID and change my script so it sorts the Policies itself?

 

Any Help would be great!

3 replies

Anthony_E
Staff
Anthony_E
Staff
February 26, 2025

Hello,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
Anthony_E
Staff
Anthony_E
Staff
February 28, 2025

Hello,

 

We are still looking for someone to help you.

We will come back to you ASAP.


Regards,

Best Regards
Anthony_E
Staff
Anthony_E
Staff
March 6, 2025

Hello,

 

To download logs via the FortiAnalyzer GUI:

  1. Navigate to Log View: Go to FortiView -> Log View -> Tools -> Download.
  2. Initiate Download: Select the download option. If the system is functioning correctly, a "preparing download" dialogue box should appear.
  3. Adjust Settings if Necessary: If there are issues with downloading, it may be helpful to set the `download-max-logs` parameter. Use the following command to configure this setting: ``` config system log settings set download-max-logs 5000000 end ``` - The value `5,000,000` is the maximum number of logs that can be set for download.
  4. Check System Version: Use the `get system status` command to verify the current OS version. If the command to set `download-max-logs` is unavailable, consider upgrading to the next patch on the FortiAnalyzer.
Best Regards
    Terms & ConditionsAccessibility statement