FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
byotova
Staff
Staff
Article Id 197190

Description

 

This article describes how to back up logs to a remote server.

 

Scope

 

FortiAnalyzer.

Solution

 

From the FortiAnalyzer command line, it is possible to back up the configuration to a remote server (FTP, SFTP, SCP).

Syntax:

 

execute backup all-settings {ftp|scp|sftp} <ip> <string> <username> <passwd> <ssh-cert> <crptpasswd> <-- Backup all FortiAnalyzer settings to a file on a server.
execute backup logs <device name(s)> {ftp|scp|sftp} <ip> <username> <passwd> <directory> [vdlist]  
<-- Backup the device logs.
logs-only <device name(s)> {ftp|scp|sftp} <ip> <username> <passwd> <directory> [vdlist]  <-- Backup device logs.
execute backup logs-rescue <device serial number(s)> {ftp|scp|sftp} <ip> <username> <passwd> <directory> [vdlist] <-- Hidden command to backup logs regardless of DVM database in case of emergency.
execute backup reports <report schedule name(s)> {ftp|scp|sftp} <ip> <username> <passwd> <directory> [vdlist] <-- Backup the reports.
execute backup reports-config <adom name(s)> {ftp|scp| sftp} <ip> <username> <passwd> <directory> [vdlist] <-- Backup report configuration.