Skip to main content
tanr
New Member
October 2, 2018
Question

FortiGate logging to FortiCloud doesn't show policy hits or bytes

  • October 2, 2018
  • 1 reply
  • 2505 views

I'm remotely managing a diskless FortiGate through FortiCloud, using its Remote Access to do direct management.  Logging is supposed to be realtime to FortiCloud.

 

The FortiGate's security policies only show bytes and hits for a brief time, then they show 0.  Maybe they're pulling the data from memory instead of FortiCloud?  Any ideas on how or if I can get this data to be correct?  Checking the logs I can find these policies getting hit -- they just don't show that they are.

 

Related to this, selecting a policy and right-clicking to "Show Matching Logs" gets me a set of the most recent, unfiltered, forwarded logs.  This used to work correctly.

 

Maybe an issue with how the FortiGate is pulling logs from FortiCloud?

 

Thoughts appreciated.

    1 reply

    makco10
    Explorer II
    October 12, 2018

    Hello,

     

    Can you share a image with the example, you can view this info via FortiView in the Fortigate?.

     

    Regards.