FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Debbie_FTNT
Staff
Staff
Article Id 197251

Description


This article describes how to switch between different log display locations.

 

Scope

 

FortiGate.

Solution


FortiGate can display logs from a variety of sources depending on logging configuration and model.

It includes memory, disk (in models that have a disk), FortiAnalyzer (or FortiManager with Analyzer features enabled), and FortiGate Cloud.

In v5.6 and lower, the logging location is set from the GUI under Log&Report -> Log Settings, or from CLI:

 

config log gui-display
    set location {memory | disk | fortianalyzer | forticloud}
end

 

Starting in firmware version 6.0, the display location is no longer configurable in such a manner. Instead, the log display location can be freely selected when viewing logs in the upper right corner:


 

Any configured disk, memory, FortiAnalyzer, or Cloud logging alternative can be selected.  FortiAnalyzer logging must be configured on the Firewall to send logs to the FortiAnalyzer. 

 

If the FortiGate logs to FortiAnalyzer Cloud, there can be restrictions in log display as FortiAnalyzer Cloud does not support all log types.

 

 

Related article:

Technical Tip: Displaying logs via CLI