Download logs in the backround/prepare raw logs in FortiAnalyzer

[Tril]

Hello,

I want to export logs for specific policy IDs and download the logs to then run a script over it.

My problem is the following: The FAZ is unbearably slow. If I download the logs via "Log View-->FortiGate-->Filter with Policy ID --> download txt " It takes eons to prepare the logs before I can download them. At first its quite fast and then it slows down, to about 20-40 Logs/second. 

For Log Files that hit the 100k Log cap, this takes a long time. I have to move the cursor every few minutes as well so that my session doesnt expire. 

Is it possible to let this log preperation happens in the backround so I can come back and just download it instantly?
Or should I use the raw logs from "Log Browse" with EVERY Policy ID and change my script so it sorts the Policies itself?

Any Help would be great!

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[Anthony_E]

Hello,

To download logs via the FortiAnalyzer GUI:

1. Navigate to Log View: Go to FortiView -> Log View -> Tools -> Download.
2. Initiate Download: Select the download option. If the system is functioning correctly, a "preparing download" dialogue box should appear.
3. Adjust Settings if Necessary: If there are issues with downloading, it may be helpful to set the `download-max-logs` parameter. Use the following command to configure this setting: ``` config system log settings set download-max-logs 5000000 end ``` - The value `5,000,000` is the maximum number of logs that can be set for download.
4. Check System Version: Use the `get system status` command to verify the current OS version. If the command to set `download-max-logs` is unavailable, consider upgrading to the next patch on the FortiAnalyzer.