Dear Fortinet Community :)
Today I have a quite simple question. I have received a new FortiGate (Fortigate 401F) and a new FortiAnalyzer (FortiAnalyzer 300G). Both are up to date with version 7.4.8. I have connected both devices to each other and authorized the FortiGate on the FortiAnalyzer. Was a simple task and worked easy peasy. Then I have created my interfaces for testing purposes. A WAN interface and a test client interface (LAN). Created my route so that I can browse as client through the web. I have defined the policy in a way that everything should be logged. Now my question:
Question: When I want to have a look at the log on the Fortigate I can switch to show the logs from the analyzer. But they are always empty. No results. I can see the logs when switching back to show the logs from the firewall itself. How is this possible? Why do I not see logs when switching to show logs from the analyzer?
One thing is different to the production environment. In my production environment I have another FortiAnalyzer. And in the security fabric -> fabric connector -> logging settings website on the firewall I can see a bit more. I see the status part AND the usage part. In my test envoironment with the new devices the usage part is not shown. I will add a screenshot here so that it is more simple to understand.
Like I said. In my test environment the part Fortianalyzer Usage is not shown. And as additional Information. The Log queue and the lof failed counters are both 0.
So can someone help me with this? This would be really great. To keep it short. The FortiGate and the FortiAnalyzer are connected and authorized. Check. But logs will not be shown on the firewall when switching to show logs from the analyzer. What do I do wrong? Have I missed something when installing the Analyzer?
Any help is much appreciated. :)
With kindest Regards
FortiLover
