Skip to main content
rikbignell
New Member
February 18, 2016
Question

Fortimanager Config Change Report

  • February 18, 2016
  • 3 replies
  • 7539 views

Hi,

 

What is the best way to generate a log / report and email it showing all the config changes to devices on the manager?

 

Our change management are looking for a log of who is making changes and what changes are being made.

 

We are on a Fortimanager 400B on 5.0.11

3 replies

scao_FTNT
Staff
Staff
February 18, 2016

you can see event log like below one

 

2016-02-18 15:27:20 log_id=0021030002 type=event subtype=objcfg pri=notice user="admin" userfrom="GUI(10.2.0.250)" msg="dev=global,adom=root,type=fw_policy,key=2,act=add,pkgname=111,dstaddr=all,dstintf=any,logtraffic=all,policyid=2,schedule=always,service=ALL,srcaddr=all,srcintf=any" adom="root"

rikbignell
New Member
February 23, 2016

I can see the event log on the manager showing the info i need.  I just cant seem to work out how to get the event logs to trigger in event management for the manager itself?

 

 

 

 

sgao_FTNT
Staff
Staff
February 24, 2016

Please enable FAZ feature first then you can define a local event log based event handler (please select root ADOM if enabled ADOM)

here is an example for alert triggered by config change event log

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!