Technical Tip: Disabling event logging for a specific IPS Signature (traffic passed through)

[dbhavsar]

Description

This article explains how to disable event logs for a specific IPS Signature.

Scope

FortiGate v6 and later.

Solution

In the CLI, enable the ID column under IPS Signature. Alternatively, hover over the signature to get its ID value.

config ips sensor

edit <ips_profile_name>

  config entries

edit <entry_number>

set rule <attackid> <----- The attack ID can be found in IPS logs

set log disable  <-----The log option is only to control the log generation when the traffic is passed through.

end

end

end