| Description | This article describes how to send logs from managed FortiClient endpoints to Fortianalyzer. |
| Scope | FortiClient endpoints that are managed by EMS. |
| Solution |
1) Access the EMS with admin privilege:
2) Go to Endpoint Profiles -> System Setting:
3) Select the desired profile and then select 'Edit':
4) Then scroll down to the Log part and select the option 'Upload Logs to FortiAnalyzer/FortiManager':
5) Select the desired logs. 6) It is possible to change the telemetry interval, which means the frequency at which the FortiClient will send the logs to the FortiAnalyzer.
Make sure to configure the FortiAnalyzer IP address or FQDN and port more below:
7) Then select 'Save' at the end.
After that, the logs will be sent to the FortiAnalyzer as well. |
