Technical Tip: How to export bulk logs from RMA & Undeployed Devices in FortiGate Cloud

[AnthonyH]

Description	This article describes how to retrieve and download logs from RMA & Undeployed devices in FortiGate Cloud.
Scope	FortiGate.
Solution	Logs can still be retrieved from FortiGate Cloud for old devices by navigating to the support portal, https://support.fortinet.com -> Services -> FortiGate Cloud. Enabling the option 'RMA’d and Undeployed' will show devices were logged out from FortiGate Cloud, have had RMA requests issued, or were Undeployed using FortiGate Cloud. Devices that were migrated to another FortiGate Cloud account will not be shown, since the logs have been transferred in the new account. To see the logs of an Undeployed device: Right-click the RMA’d and Undeployed device and select Device View. Navigate to Logview and required event type. The export button allows exporting 10, 50, 100, 200, 500, 1000, or 2000 entries in CSV format:   Log retention time depends on the device's FortiGate Cloud subscription. For devices without a FortiGate Cloud subscription, logs are kept for seven days, see 'FortiGate Cloud Feature comparison'. If the device has a paid FortiGate Cloud subscription it is possible to download the full log file. Select “log files” and download: Related Articles: Technical Tip: Obtaining logs of undeployed FortiGate from FortiGate Cloud