I have two Fortigates that appear to be configured indentically however I see events in the Log & Report - System Events pane for one device but not the other.
Both devices ship their logs via syslog to another device and I can see system events, such as admin login, being generated for both devices but only one displays correctly in the GUI.
Any ideas?
Thanks
You must be very careful while applying any solution because sometimes many forum members are not able to answer the question but still they answer it anyhow. So, It's important to confirm the solution and then apply it.
Hello! Is disk logging enabled on both devices? System events are configured to be logged? On the log view page, is the right source of logs selected? Because, since you know it's logging the information properly, as you can see on that other device, it seems to be just an viewing issue. You might have to format the fortigate's disk, which will cause you to lose the logs you already have. Best regards, tioeudes
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.