FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
WinterSnowYap
Article Id 261433
Description This article provides the steps to view Alert Message Console on FortiAnalyzer GUI and FortiAnalyzer CLI.
Scope FortiAnalyzer.
Solution

How to view Alert Message Console on FortiAnalyzer GUI.

 

After login to FortiAnalyzer GUI, go to System Settings -> Dashboard -> Alert Message Console.

 

AlerMessageConsole_1.PNG

 

Maximum number of Alert Message Console = 25, more than 25 records will be overridden.

 

How to view Alert Message Console on FortiAnalyzer CLI.

 

  1. After login to FortiAnalyzer CLI, it is required to configure as below to enable shell access:

config system admin setting

    set shell-access enable

end

 

AlerMessageConsole_2.PNG

 

     2. Access to shell and view Alert Message Console.

 

exe shell

cd /var/log

cat alert_console_msg.dat

cd

pwd

exit

 

AlerMessageConsole_3.PNG

 

The highlighted 'd' in the red box is aimed to differentiate from new alerts.