Description
This article explains how to disable event logs for a specific IPS Signature.
Scope
FortiGate v6 and later.
Solution
In the CLI, enable the ID column under IPS Signature. Alternatively, hover over the signature to get its ID value.
config ips sensor
edit <ips_profile_name>
config entries
edit <entry_number>
set rule <attackid> <----- The attack ID can be found in IPS logs
set log disable <-----The log option is only to control the log generation when the traffic is passed through.
end
end
end
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.