Description
This article explains how to download Logs from FortiGate GUI.
Scope
FortiGate.
Solution
Logs can be downloaded from GUI by the below steps :
After logging in to GUI, go to Log & Report -> select the required log category for example 'System Events' or 'Forward Traffic'.
Select the download icon: (on the top of the page).
The log file will be downloaded to the 'Downloads' folder of the browser.
Note:
If a specific line of log is needed, select the required log row (for multiple rows press the ‘Ctrl’ key on the keyboard and then select the required log row) and then select the download icon.
Also, make sure the popup blocker or browser download settings are not blocking the download.
System Event:
v7.0:
v7.2 and v7.4:
Select from the drop-down to download or view:
The downloaded file name will be in the format of log source-type-subtype-date.log For example, forward traffic logs downloaded from FortiAnalyzer will be 'fortianalyzer-traffic-forward-2025_01_01.log'.
Note:
By design, all of the logs can be viewed based on the filters applied. This does not mean that it allows a whole set of logs based on the filter to be downloaded, as it will only allow a small set of logs. To download the whole log file based on the filter, it is required to export all of the logs via FTP or TFTP server.
Note:
There is a hard-limit of 400,000 log entries that can be downloaded.
Related articles:
Technical Tip: Download Debug Logs and 'execute tac report'
Technical Tip: How to configure logging in memory in later FortiOS
Technical Tip: How to check/filter configuration changes logs
Technical Tip: How to download disk logs in plaintext format avoid performing LZ4 decompression usin...
Technical Tip: Standard procedure to format a FortiGate Log Disk, log backup from disk
Technical Tip: How to configure syslog on FortiGate
