Technical Tip: Disabling event logging for a specific IPS Signature

[dbhavsar]

Description

This article explains how to disable event logs for a specific IPS Signature.

Scope

FortiGate v6 and later.

Solution

In the CLI, enable the ID column under IPS Signature. Alternatively, hover over the signature to get its ID value.

# config ip sensor

edit <ips_profile_name>

edit <entry_number>

set rule <attackid> <- The attack ID can be found in IPS logs

set log disable

end

end

end