Technical Tip: Enable audit log via CLI

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 266822

Description

This article describes how to enable the audit log via CLI.

This allows the logging of the CLI commands that were run in CLI by a specific admin user.

Scope

FortiGate 7.0.2+.

Solution

Below are the steps to enable the audit log on the CLI:

config system global
set cli-audit-log enable

end

To test if the audit logs are working, try a few commands:

show log fortianalyzer setting

config log fortianalyzer setting

end

3662

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.