Skip to main content
hankn
New Member
August 26, 2020
Question

How to log successful logins?

  • August 26, 2020
  • 7 replies
  • 33135 views

Newbie question:

I see all failed login attempts in the event log.

How do I enable Fortigate 6.4.2 so that it logs all successful login attempts?

 

Thanks,

Hank

    7 replies

    lobstercreed
    New Member
    August 30, 2020

    You should see successful logins in the event log as well.  I'm not sure where you're looking exactly, but I can see them by going to Log & Report -> Events -> System Events and looking for "Admin login successful" in the Log Description field.

    hankn
    hanknAuthor
    New Member
    August 30, 2020

    That is exactly where I am looking but all I see is unsuccessful login attempts.

    Running 6.2.4

    Even Add Filter doesn't show an option to see successful logins (see attachment).

     

    lobstercreed
    New Member
    August 31, 2020

    Under Log & Report -> Log Settings, look at the bottom in the Log Settings section and see if Event Logging is set to "All" or some other value.  I don't know what it needs to be, but mine is "All".

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT