Skip to main content
hankn
New Member
August 26, 2020
Question

How to log successful logins?

  • August 26, 2020
  • 7 replies
  • 33113 views

Newbie question:

I see all failed login attempts in the event log.

How do I enable Fortigate 6.4.2 so that it logs all successful login attempts?

 

Thanks,

Hank

    7 replies

    lobstercreed
    New Member
    August 30, 2020

    You should see successful logins in the event log as well.  I'm not sure where you're looking exactly, but I can see them by going to Log & Report -> Events -> System Events and looking for "Admin login successful" in the Log Description field.

    hankn
    hanknAuthor
    New Member
    August 30, 2020

    That is exactly where I am looking but all I see is unsuccessful login attempts.

    Running 6.2.4

    Even Add Filter doesn't show an option to see successful logins (see attachment).

     

    lobstercreed
    New Member
    August 31, 2020

    Under Log & Report -> Log Settings, look at the bottom in the Log Settings section and see if Event Logging is set to "All" or some other value.  I don't know what it needs to be, but mine is "All".

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!