Skip to main content
sinfreda
sinfreda
Visitor III
May 2, 2022
Question

Export last Log in

  • May 2, 2022
  • 2 replies
  • 3997 views

Hi,

 

How can I export a list that show the last time that FortiClient users was Log in via FortiGate? (SSL tunnel)

2 replies

A
Anonymous_User
New Contributor II
May 4, 2022

Hello @sinfreda ,

 

Thank you for posting to Fortinet Community Forum.

 

As per your query, please follow the steps mentioned below:-

  1. Open FortiClient.
  2. Go to  Settings.
  3. Under the "Logging" heading, select "Export Logs".
  4. Choose a convenient location to save the file, such as the Desktop.

Reference: https://docs.fortinet.com/document/forticlient/6.2.6/administration-guide/544799/exporting-the-log-file

 

sinfreda
sinfredaAuthor
Visitor III
May 8, 2022

Hey,
Thanks for your help, but in the path you wrote I don't see any export to log option.

I see only System>Settings and noting to export only Debug logs.

my FortiGate version is 7.0.5 if it's help.

seshuganesh
Staff
seshuganesh
Staff
May 9, 2022

Hi Team,

 

You cannot find the exact last login, but you can find all the SSL VPN events like tunnel success means logged in under logs and reports >> events >> VPN events

Please check and keep us posted

sinfreda
sinfredaAuthor
Visitor III
May 9, 2022

Hey,

Thanks but It gives data only for a short period of a week.
I would like to know which user does not log in for a period exceeding 30 days in order to know if it pays to give him a token.

seshuganesh
Staff
seshuganesh
Staff
May 9, 2022

Hi Team,

 

Please execute this command "get sys status", please check log disk available or not under that output.

If log disk is available, you can enable disk logging and increase the age to 30 days using these articles:

https://docs.fortinet.com/document/fortigate/6.2.1/cli-reference/373620/log-disk-setting

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-set-the-maximum-age-for-logs-on-disk/ta-p/193116#:~:text=By%20default%2C%20the%20maximum%20age,older%20than%20this%20are%20purged.

please keep us posted

Terms & ConditionsAccessibility statement