Skip to main content
asyraf_zaidi
asyraf_zaidi
New Member
March 6, 2025
Question

Fortigate sending delayed logs to syslog

  • March 6, 2025
  • 1 reply
  • 1044 views

Hi All, anyone experiencing issue with Fortigate Firewall sending delayed logs to the syslog server?

I am experiencing an issue where the logs are only coming up 5-10 seconds after the connection has been established. 

 

Thanks

1 reply

AEK
SuperUser
AEK
SuperUser
March 6, 2025

Hi Zaidi

As far as I know the session log is sent only once it is closed. This is the default behavior.

But as far as I remember there is a way to change this behavior and to log the session once it is created. But I think the default one is the good practice for almost all cases.

AEK
dingjerry_FTNT
Staff
dingjerry_FTNT
Staff
March 6, 2025

Hi @AEK ,

 

I think that you are talking about this setting (logtraffic-start) in firewall policy settings.

    AEK
    SuperUser
    AEK
    SuperUser
    March 6, 2025

    Thanks Jerry, you are right

    And this is why Zaidi is receiving the log seconds after the session starts. Actually he receives the log on session closure.

    AEK
    Terms & ConditionsAccessibility statement