Skip to main content
3pointD
3pointD
New Member
November 12, 2015
Solved

Stop Monitor / Logging

  • November 12, 2015
  • 1 reply
  • 8550 views

Hello,

 

Quick question: In order to allow Skype to continue to function after putting P2P blocking in place I had place a monitoring rule explicitly for Skype above it. This allow access to Skype but fills up my logs with constant entries. What's the best way to set this up so I don't monitor Skype at all?

 

Thanks!

    Best answer by ede_pfau

    (There is no 'allow' action in AppCtrl.)

    In 

    conf log (mem|disk|whatever) filter
    , set 
    set severity notification
    instead of
    set severity information
    .

    1 reply

    neonbit
    neonbit
    New Member
    November 13, 2015

    Change your action from 'monitor' to 'allow', that way it will be allowed but not logged.

    ede_pfau
    SuperUser
    ede_pfauAnswer
    SuperUser
    November 13, 2015

    (There is no 'allow' action in AppCtrl.)

    In 

    conf log (mem|disk|whatever) filter
    , set 
    set severity notification
    instead of
    set severity information
    .

    3pointD
    3pointDAuthor
    New Member
    November 13, 2015

    Thanks for this Ede.

     

    I guess I'm so used to finding most of the features I need in the gui that I forget that there is more under the hood in the cli. 

     

    Also, a related question. How do I configure for FortiCloud? I have another unit that is connected to Forticloud and I want to limit the log entries sent there to avoid filling up the space so quickly. I tried to 'get log forticloud filter' but there was nothing to be found.

     

    FYI just tried 'get log fortianalyzer filter' is this where I configure for Forticloud?

     

    Thanks!

    Terms & ConditionsAccessibility statement