Skip to main content
michelalves
michelalves
New Member
April 9, 2026
Question

FortiAnalyzer does not store security event logs (WebFilter, APP Control)

  • April 9, 2026
  • 1 reply
  • 108 views

In FortiAnalyzer, I have one ADOM with 200 firewalls and another ADOM with 5 firewalls, but on all the firewalls regardless of the ADOM, I can't see the logs in security events > WebFilter, for example, only from memory.

Also, in FortiAnalyzer, in FortiView the tabs Traffic, Shadow IT, Applications and Websites, VPN, and System are grayed out, making it impossible to select them.

Could this be a license issue or some configuration parameter?

FAZ_1.pngFAZ_2.pngFAZ_3.png

1 reply

farhanahmed
Staff
farhanahmed
Staff
April 9, 2026

1. Check if the FGT is sending the security logs to FAZ.

- Check FGT config: "config log fortianalyzer log filter" and make sure a filter is not stopping the logs.

 

2. Check if FAZ has the event log files under Log View > Log Browse.

3. If the log files are present then Log View is empty it would mean the SQL DB is not building or has issues.

- You can try to rebuild the SQL DB on FAZ -> diagnose sql status rebuild-db

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-FortiAnalyzer-SQL-database-rebuild/ta-p/193883 

 

- But if the Log Browse in FAZ does not show log files from FAZ that would mean logs are not coming to FAZ.

farhan.ch
Terms & ConditionsAccessibility statement
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!