Skip to main content
smayberry
smayberry
New Member
July 12, 2016
Question

FortiAnalyzer Backups

  • July 12, 2016
  • 2 replies
  • 7235 views

I'm looking for a solution/tactic to backup my FortiAnalyzers.

Currently running two 3000 FortiAnalyzers in Analyzer mode (v5.2.x). Approximately 6TB of data right now between the two.  Taking log data from numerous devices in the field.  Log retention is currently set to 90 Days, and monthly we run a batch of reports for these devices, as well as ad hoc reports.

 

What is the best way to keep my log data backed up, what options are others using, whether it be collector/analyzer mode, or offloading to a seperate device? Manually moving logs via SCP/SFTP/FTP is not feasible, so that is out.

    2 replies

    hzhao_FTNT
    Staff
    hzhao_FTNT
    Staff
    July 12, 2016

    Hi there, have you tried to upload your logs when log file rolled? From GUI, System settings -> Advanced -> Device Log Settings -> "Upload logs using a standard file transfer protocol".

     

    regards,

    hz

    emnoc
    emnoc
    New Member
    July 12, 2016

    Manually moving logs via SCP/SFTP/FTP is not feasible, so that is out.

     

     

    Actually scp/ftp/tftp are the best methods for moving files and is simple and effective.

     

    e.g

     

    execute  backup logs all

     

    The webGUI still uses  SCP/FTP for example just that you can apply a scheduler. The same exists in the fortimail . Only downside you can not specify to rollup servers.

     

    I've asked for a feature request numerous times for this function btw.

     

     

     

     

    Mikael_A
    Mikael_A
    New Member
    July 14, 2016

    We are using Cattools from solarwinds. Logs on (in our case) once a month to backup the logs to a server using scp and a folder that is created every month based on the date.

     

    Terms & ConditionsAccessibility statement