Troubleshooting Tip : Essential 'get' commands in FortiGate

[nevan]

Description	This article describes essential 'get' commands for troubleshooting purposes, with a short description of each.
Scope	FortiGate, FortiGate-VM.
Solution	The 'get' commands are used to display real-time or runtime information about the system. They help administrators monitor the current state, status, and performance of the firewall and its components. The essential get commands in FortiOS/FortiGate/FortiGate-VM are as follows: Command Purpose get system status Displays basic system information, including firmware version, serial number, and system uptime. get system performance status Shows CPU and memory usage, sessions, and other real-time performance data. get system interface Displays runtime interface statistics (link status, IP, etc.). get router info routing-table all Displays the complete routing table. get router info bgp summary Shows BGP summary if BGP is enabled. get router info ospf neighbor Displays OSPF neighbor relationships. get firewall policy Displays active firewall policy hits and matching traffic details. get firewall shaping-policy Lists all configured shaping policies. get firewall vip Lists all configured virtual IPs. get firewall ippool Lists all configured IP Pools. get vpn ipsec tunnel summary Summarizes the status of all IPsec VPN tunnels. get vpn ipsec tunnel details Shows detailed info about each IPsec tunnel. get vpn ssl monitor Displays active SSL VPN user sessions. get vpn ssl settings Lists all configured SSL VPN settings. get user setting Displays the configured user authentication setting. get system ha status Shows high availability (HA) configuration and state. get log syslogd setting Displays current syslog server logging settings. get log fortianalyzer setting Displays current Fortianalyzer logging settings. get log fortiguard setting Displays current FortiGate cloud logging settings. get webfilter status Displays the current status of web filtering services. get application list Displays current application control statistics. get ips setting Shows IPS engine's current configuration details. get antivirus setting Displays current antivirus configuration details. get system snmp sysinfo Shows SNMP system information settings. get wireless-controller status Displays wireless controller status (if enabled). get system interface transceiver Displays information of interfaces which support SFP transceiver. get hardware status Displays hardware information, such as NP, Chip,... details. Apart from the baseline show commands, some features (e.g., SD-WAN, ZTNA, etc) may have different get commands depending on the versions, but pressing the '?' character right after the 'get' command will give exactly the outputs that will be available within the feature. Related article: Troubleshooting Tip : Essential 'show' commands in FortiGate