Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Not applicable

Disable log on all rules...

Hi Forum: I need to disable log setting in all rules. I have more than 600 rules and it is very tedious to do one by one. Is there any command to disable log on all rules? Thanks in advance and greetings, Olaf
5 REPLIES 5
hidayet
New Contributor II

Hi Olaf, I' m not sure but I think this is not possible
http://www.hidayetaltun.com
http://www.hidayetaltun.com
Carl_Wallmark
Valued Contributor

Hi, you could do it like this: make a backup of your config, then use wordpad to " search-and-replace" and then restore your config, the firewall will reboot when restoring !!

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C

Thanks for the tip. I don' t belive it' s not posible to disable all logs. It is very time consuming to disable them one by one and therefore there should be an easier way. The backup, replace and restore option is not viable in a 24x7 production environment because of the reboot times and missconfiguration issues. Fortinet, put your hands on this job... Thanks and best regards, Olaf
Carl_Wallmark
Valued Contributor

maybe a fortimanager can do the job, but i dont know. another way is to create a script, but that would take some time to create... im out of ideas

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
SECCON1MC
New Contributor

if you do not want to perform the backup restore method, you could: perform a backup of your config delete everything except the policy section of the config perform a search and replace of the log file setting save the text file upload the file as a Bulk CLI Command File there you are! Please make sue you have a backup of your config before you start this process. Good Luck ~Matt
[link=http://logMojo.com]logMojo[/link] by Security Confidence Cloud Based - Logging ● Alerting ● Reporting ● Monitoring ● Management Signup today!
[link=http://logMojo.com]logMojo[/link] by Security Confidence Cloud Based - Logging ● Alerting ● Reporting ● Monitoring ● Management Signup today!
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors