Fortigate cannot send logs to second FAZ

Forum|Forum|8 years ago
July 21, 2018
3 replies
5303 views

Hello,

I deployed a second FAZ in my network and and after I added a FortiGate I noticed that it cannot send logs. The FortiGate was working for a couple of years with the first FAZ with no problem. However when configured fortianazer2 and added the FG to FAZ, the FG appears in the device manager but with the red spot indicating that no logs have received from that FG.

A second FG that I added is sending logs OK.

Can you tell me possible causes for the FG not been able to send logs to the second FAZ and where to look and fix them?

Thanks

Nicholas_Doropoulos

New Member

Hello,

There are two methods of registering a Fortigate to a FortiAnalyser. Would you mind sharing with us which one you used?

Are both devices in the same subnet? Can they ping one another?

Thanks.

brazz_FTNT

Staff

Hey,

Can you also send us the result of below commands:

get system status (on both FAZ and FGT)

config log fortianalyzer setting (On the FGT side)

get

config log fortianalyzer2 setting (On the FGT side)

get

Thanks

simonw

New Member

It might be that you have to specifically set which "source IP" the Fortigate should use to reach the FAZ.

See below from my FW config at home.

config log fortianalyzer setting set status enable set server "10.10.10.35" set source-ip "100.100.100.1" set upload-option 1-minute set reliable enable

Hope this is of any help.

Sign up

Login with SSO

Login to the community

Login with SSO