Technical Tip: Log Files Exported from FortiGate GUI displays Last 24 Hours of Log Data Instead of Full 7-Day Range

[ssanga]

Description	This article addresses an issue where FortiGate exports only the last 24 Hours of Log Data from GUI even though the log duration is set to 7 days.
Scope	FortiGate v7.2.8, v7.4.1, v7.6.0
Solution	When filtering Forward Traffic Logs by selecting the duration 'last 7 days' with the 'Disk' storage setting in the GUI, the logs are displayed correctly for the entire 7-day period. However, upon downloading the logs, the generated text file contains only logs from the last 24 hours.   This issue is currently under investigation by the development team. The article will be updated with the latest information once a fix is available. Logs required by FortiGate TAC for investigation: Forward Traffic logs. TAC Report: execute tac report Configuration file of the FortiGate. Fortinet Support Tool data: Troubleshooting Tip: Collect GUI slowness and errors debugs via Fortinet Support Tool