FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
HakimiAzman
Staff
Staff
Article Id 412384
Description This article describes why the request and download endpoint diagnostic logs options may be missing in FortiClient EMS and how to troubleshoot.
Scope FortiClient EMS.
Solution

FortiClient EMS allows administrators to request and download endpoint diagnostic logs directly from the FortiClient EMS console without requiring end-user interaction. Normally, this is done by navigating to:
Endpoints -> All Endpoints -> Select endpoint(s) -> Action -> Request Diagnostic Results.

It will take around 20 minutes to be able to download the available Diagnostic Results.

 

Screenshot 2025-09-24 162109.png

 

In some cases, these options may not appear. To troubleshoot:

  • Check Administrator Permissions: Only administrators with sufficient rights can use this feature. The built-in Restricted and read-only administrator roles will not have this option.
  • Check Endpoint Status: The endpoint status must be online. If it is offline, away, or otherwise disconnected, FortiClient EMS cannot request or download diagnostic logs, and the options will not appear.
  • Check endpoint availability: If the endpoint disconnects or goes offline, before logs are generated, the request fails and can not be downloaded.

 

Screenshot 2025-09-24 164024.png

 

Note: Diagnostic log collection through FortiClient EMS may be unreliable if endpoint connectivity is unstable. If the collection fails, logs should be gathered manually as described in the following article:

Technical Tip: How to generate and export Debug logs from various platforms running with FortiClient...