How to view FortiAnalyzer Logs from VMDK

Hi all,

I have a VMDK Image from a FortiAnalyzer, which contains FortiGate logs.

The data is not stored in raw format and cannot be viewed with a text editor.

I do not have the credentials to login to the virtual machine.

How can I view the logs? Do I have to setup a FortiAnalyzer and import specific files by hand?

Thanks in advance!

SuperUser

Hi

As this is not documented I guess you need to open a ticket with Fortinet support.

AEK

Staff

Hi,

Yes, one way is export and then to import them as it is shown in the following article. Then in the new FortiAnalyzer you should create new devices with the SN of the FGT's so the imported logs become visible.
https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Backup-and-restore-of-FortiAnalyzer-settings-logs/ta-p/191972

Sign up