Skip to main content
Khris
New Member
March 3, 2022
Question

FortiGate to Splunk syslog filter commands

  • March 3, 2022
  • 1 reply
  • 1762 views

Hi All, 

Good day! Just asking if there is any command that we can type in the CLI so that we can verify whether the filtered events have been applied? 

Here are the commands that we have entered to our firewall. FGT 600D

>>> config log syslogd filter
>>>set filter-type include
>>>set filter "event-level(information)"


May we know what is the command to type 

1 reply

Khris
KhrisAuthor
New Member
March 3, 2022

Eureka! Just discovered the proper command to type in. 

>>> config log syslogd filter
>>>set filter-type include
>>>set filter "event-level(information) event-level(debug) event-level(critical)" 
show 
end


NOTE: THIS IS THE COMMAND YOU WILL NEED TO TYPE IN FOR FILTERING MULTIPLE EVENT-LEVELS. HAVE A WONDERFUL DAY!