FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Kenichi_Terashita_FT
Article Id 197341

Description

 

This article describes the available logging options that can be found under memory, disk, etc.


Scope

 

FortiOS v7.4.9 and newer.


Solution

 
From older versions to the new ones, there have been changes in the logging options, for example, the removal of 'set other-traffic [enable|disable]' under 'config log [memory|disk|fortianalyzer|...] filter'.
 
As an example, on version 7.4.9 of FortiOS, the options available under memory will be as follows:
 

config log memory filter

(filter) # set ?
severity          Log every message above and including this severity level.
forward-traffic   Enable/disable forward traffic logging.
local-traffic     Enable/disable local in or out traffic logging.
multicast-traffic Enable/disable multicast traffic logging.
sniffer-traffic   Enable/disable sniffer traffic logging.
ztna-traffic      Enable/disable ztna traffic logging.
anomaly           Enable/disable anomaly logging.
voip              Enable/disable VoIP logging.
gtp               Enable/disable GTP messages logging.
forti-switch      Enable/disable Forti-Switch logging.

 
The options under 'config log disk filter' are the same as 'config log memory filter'.
The option 'set extended-log' can be found under 'config log setting':
 
config log setting
    set resolve-ip disable
    set resolve-port enable
    set log-user-in-upper disable
    set fwpolicy-implicit-log enable
    set fwpolicy6-implicit-log disable
    set extended-log disable
    set local-in-allow disable
    set local-in-deny-unicast disable
    set local-in-deny-broadcast disable
    set local-out enable
    set local-out-ioc-detection enable
    set daemon-log disable
    set neighbor-event disable
    set brief-traffic-format disable
    set user-anonymize disable
    set expolicy-implicit-log disable
    set log-policy-comment disable
    set rest-api-set disable
    set rest-api-get disable
    set rest-api-performance disable
    set long-live-session-stat enable
end