EMS Logs Not Ingesting in FortiAnalyzer Only FortiClient Logs Visible

[mhamza]

Hello Fortinet Support,

We are facing an issue where EMS logs are not being ingested into Forti Analyzer. At present, only FortiClient logs are visible, but EMS server activity/logs are not showing up.

Details:

• Product: Forti Analyzer & FortiClient EMS

• Issue: EMS logs not ingesting/forwarding to Forti Analyzer

• Observed: Only FortiClient logs are displayed

• Expected: Both FortiClient and EMS logs should be ingested for full visibility

Request:
Could you please assist us in troubleshooting and resolving this? If any specific configuration or version requirements are needed for EMS log forwarding, kindly provide guidance.