Can I filter FortiGate's syslog setting

Sathapon · ‎04-06-2020

I have used the FortiGate for SSL-VPN only. I would like the fortiGate send only log "User access Fortigate and User login SSL-VPN". to a syslog. What should I do?

Details

FortiGate 101F

Firmware 6.2.3

jhouvenaghel_FTNT · ‎04-07-2020

If you know the logid of these particular events then you should be able to use :

set filter "logid(id1,id2, ..)" with filter-type = include (under config log syslogd filter)

View solution in original post

ede_pfau · ‎04-07-2020

IMHO, receive all event logs and filter on your syslog server.

Ede

"Kernel panic: Aiee, killing interrupt handler!"

jhouvenaghel_FTNT · ‎04-07-2020

If you know the logid of these particular events then you should be able to use :

set filter "logid(id1,id2, ..)" with filter-type = include (under config log syslogd filter)