Skip to main content
yeowkm99
yeowkm99
New Member
February 26, 2025
Solved

Sending syslog to log collector

  • February 26, 2025
  • 2 replies
  • 1235 views

i have enabled syslog logging for 1x FG100E and 1 x FG100F.

but the log collector does not seems to receive any logs from these 2.

Only the main firewall FG401E is able to send logs to the log collector without issues.

is there any limitations for FG100 series ?

Best answer by yeowkm99

issue resolved after i add specify interface in the syslog as both are through ipsec tunnels.

2 replies

rbraha
Staff
rbraha
Staff
February 26, 2025

Hi @yeowkm99 

You can run some packet capture or to run debug commands on FGT side ,please check the following KBs that might help.

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-and-syslog-communication-check/ta-p/189407

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Syslog-troubleshooting-use-cases/ta-p/342629

Skytech1
Skytech1
Explorer II
February 26, 2025

There is no limitation on FG-100F to send syslog. Have you checked with a sniffer if the device is trying to send syslog?? 

You can try 

diag sniffer packet any 'port 514' 4 n

 

if you have a different port configured for sending syslog you can change the 514 to the port number you are using, and seeing if the FG is actually trying to send syslog

yeowkm99
yeowkm99AuthorAnswer
New Member
February 27, 2025

issue resolved after i add specify interface in the syslog as both are through ipsec tunnels.

Terms & ConditionsAccessibility statement