Technical Note: How to set a FortiGate unit to send the real time log to a FortiAnalyzer unit

[caunon]

Description

This article explains how to enable a FortiGate unit to send the real-time log to a FortiAnalyzer unit.

Scope

FortiOS firmware version 4.00 MR3

FortiOS firmware version 5.0.x

Solution

FortiOS firmware version 4.0 MR3:

The following CLI commands can be used to set the FortiGate unit to send the real time log to a FortiAnalyzer:

# config log fortianalyzer setting
# set upload-option realtime
# end

FortiOS firmware version 5.0.x:

To enable real time log upload from the CLI, following commands can be used:

# config log fortianalyzer setting
# set upload-option realtime
# end

To enable real time log upload from the GUI, go to Log & Report > Log Config > Log Setting, enable 'Send Logs to FortiAnalyzer/FortiManager' and select 'Realtime' as an upload option.