Real Time Logs

1 reply
6952 views

Hi everyone.

I'm using the FortiAnalyzer (v6.0.2) to monitor deployed devices on the FortiManager. The problem encountered is that the Logs doesn't update. It's connected, but there is no traffic going through, thus no analyzing can be done.

Your help is much appreciated.

6.0

brazz_FTNTAnswer

Staff

Hello,

There are couple of points that need to be checked :

[ul]

Are FGTs sending logs real-time to the FAZ?You need to see the log setting

Logs going out from the FGT ?you need to run sniffer on FGT itself to see if the logs going out from the FGT itself

Check the which FGTs are sending logs ? Is the IP correct ?

Verify the FAZ compatibility Chart https://docs.fortinet.com/uploaded/files/2901/fortianalyzer-compatibility.pdf

Check to see if logs are being received by FAZ

What is the logging status on FAZ (green, red )

FAZ ADOM is enabled ? Are you in the right ADOM

What do you see in log view ? Can you switch to realtime and historical logs ? any logs there ?[/ul]

Thanks