Technical Tip: Log display location in GUI

[Debbie_FTNT]

Description
This article describes how to switch between different log display locations.

Solution
FortiGate can display logs from a variety of sources depending on logging configuration and model.

It includes memory, disk (in models that have a disk), FortiAnalyzer (or FortiManager with Analyzer features enabled), and FortiGate Cloud.

In firmware version 5.6 and lower, the logging location is set from the GUI under Log&Report -> Log Settings, or from CLI:

# config log gui-display
    set location {memory | disk | fortianalyzer | forticloud}
end

Starting in firmware version 6.0, the display location is no longer configurable in such a manner.

Instead, log display location can be freely selected when viewing logs in the upper right corner:

Any of configured disk, memory, FortiAnalyzer or Cloud logging alternative can be selected.

Note that if the FortiGate logs to FortiAnalyzer Cloud, there can be restrictions in log display as FortiAnalyzer Cloud does not support all log types.

Related Articles

Technical Tip: Displaying logs via CLI