What is the best course of action to detect devices not properly logging?
Example: If a new device is added to an environment and sends an initial log, but another log isn't sent another 24 hours, will an alert generate?
Also, for devices that are currently stopped logging, what would be the best course of action to capture that info?
Hi @cheerio ,
You can use CMDB > CMDB Report "Device Monitoring Errors" - This reports devices whose performance / availability monitoring status is Warning or Critical .
Additionally look out for CMDB Reports > Device Event Collection Status , Device Event Collection Errors etc
Welcome to your new Fortinet Community!
You'll find your previous forum posts under "Forums"
User | Count |
---|---|
72 | |
25 | |
15 | |
10 | |
10 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.