Technical Tip: How to export bulk logs from RMA & Undeployed Devices in FortiGate Cloud

[AnthonyH]

Description	This article describes how to retrieve and download logs from RMA & Undeployed devices in FortiGate Cloud.
Scope	FortiGate Cloud.
Solution	Logs can still be retrieved from FortiGate Cloud for old devices by navigating to the support portal, https://support.fortinet.com -> Services -> FortiGate Cloud. Enabling the option 'RMA’d and Undeployed' will show devices were logged out from FortiGate Cloud, have had RMA requests issued, or were Undeployed using FortiGate Cloud. Devices that were Technical Tip: Migrate a FortiGate Cloud account to another one will not be shown, since the logs have been transferred to the new account. To see the logs of an Undeployed device. Navigate to Analytics > Logs and choose the correct log type that needs to be exported. Select 'Export to CSV' to export log entries in CSV format. Log retention time depends on the device's FortiGate Cloud subscription. For devices without a FortiGate Cloud subscription, logs are kept for seven days, see 'FortiGate Cloud Feature comparison'. If the device has a paid FortiGate Cloud subscription, it is possible to download the full log file. Select Log Archives and Raw Logs. Then choose the entry to download: Related article: Technical Tip: Obtaining logs of undeployed FortiGate from FortiGate Cloud