No logs on Fortigate 30D - Firmware: FGT30D-5.00-build292

Forum|Forum|11 years ago
May 22, 2015
2 replies
7537 views

Hi

I have just setup a Fortigate 30D and configured it to use RSA SecurID 2FA which is working.

I have enabled event logging for all events. When I check the logs through the GUI and the Console they are all empty.

I have also enabled email alerting which is working.

any ideas?

Simon

5.0

Best answer by gschmitt

Logging has been disabled in later firmwares for smaller devices

Create a FortiCloud account and connect the device to it. You have 100MB logs per day for free and a total of 1GB Logs (Log size not traffic)

gschmittAnswer

New Member

Logging has been disabled in later firmwares for smaller devices

Create a FortiCloud account and connect the device to it. You have 100MB logs per day for free and a total of 1GB Logs (Log size not traffic)

Christopher_McMullan

Staff

If alert emails are working, then logging to some suitable non-memory destination is likely already set up, though maybe not for all events.

I would check on the default severity level of the events you want to record, and the log source the GUI looks at. Under Log & Report >Log Config > Log Settings, in the "GUI Preferences" section, what selection is chosen for "Display Logs From"?

And in the CLI:

config log <source> filter //--so, memory, disk, syslogd, etc., based on the Display Logs From setting above

get | grep severity

end

Memory logging, by default, uses 'warning' level severity, whereas most/all other destinations use 'information', which may account for the discrepancy between alert email events and the lack of logs when viewed locally on the FortiGate.

Sign up

Login with SSO

Login to the community

Login with SSO