Technical Tip: How to check which FortiGate VDOM is using which interface to send logs to FortiAnalyzer

[WinterSnowYap]

Description	This article describes how to check which FortiGate VDOM is using which interface to send logs to FortiAnalyzer.
Scope	FortiAnalyzer.
Solution	Below are the scenarios: FortiGate VDOM does not enable the FortiAnalyzer Override Setting. FortiGate VDOM enables the FortiAnalyzer Override Setting. Below are the ports assignation at different VDOMS. In this example, 'root' VDOM and 'vdom_A' VDOM. 'root' VDOM is assigned at port1. 'vdom_A' VDOM is assigned at port2. The static route is configured at 'root' VDOM and 'vdom_A' VDOM, so both VDOMs will know which interface to go out and reach FortiAnalyzer. Scenario 1: FortiAnalyzer settings are configured in the Global setting, but FortiGate 'vdom_A' VDOM does not enable the FortiAnalyzer Override Setting. Use the steps below to verify which FortiGate 'vdom_A' VDOM is using which interface to go out and reach FortiAnalyzer. Scenario 2: The FortiAnalyzer settings are configured in the Global setting, and FortiGate 'vdom_A' VDOM enables the FortiAnalyzer Override Setting.  Use the steps below to verify which FortiGate 'vdom_A' VDOM is using which interface to go out and reach FortiAnalyzer. Related Article: Troubleshooting Tip: FortiGate to FortiAnalyzer connectivity