Skip to main content
Spike
New Member
January 21, 2024
Question

Show MAC address in Forticloud logs

  • January 21, 2024
  • 1 reply
  • 1629 views

Hi All,

 

Is it possible to show MAC address in Forticloud logs.

 

Most of our clients run DHCP, so source IP is not really useful in most cases when tracking down devices as logs can be from many days ago.

 

Please see attached as an example.

 

Thanks. Screenshot_15.png

1 reply

syao
Staff & Editor
Staff & Editor
January 22, 2024

Hello Spike,

 

It seems you're checking this log from the Application Control log view, in which the mac address would not appear. Did you try to check it from the Forward traffic logs?

If you still don't see the MAC address from the Forward traffic logs, kindly double-check if the device detection has been enabled under the source interface. https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-display-the-source-MAC-addresses-of-devices/ta-p/196890

Best regards,
Stephen

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.