Extract existing logs from Analyzer to CSV

[mrflow1]

How can I extract the existing logs from a fortianalyzer version 7.4.4 to CSV? They are asking me for the last 90 days for a particular analysis.

Within the team there is an adom who receives the 4 fortigates and it is required to obtain this information from all of them.

I tried to do it Through API but the documentation is limited,

Has anyone achieved it?

I don't know if the logs already existing on the computer could be converted to csv in any tool?

[akumar02 · Accepted solution]

Hello @mrflow1 

To download a log file:

1. Go to Log View > Logs > Log Browse and select the log file that you want to download.

2. In the toolbar, click Download.

3. In the Download Log File(s) dialog, configure download options:

   • In the Log file format dropdown list, select Native, Text, or CSV.

   • If you want to compress the downloaded file, select Compress.

4. Click Download.
   Reference: 
   https://docs.fortinet.com/document/fortianalyzer/7.6.1/administration-guide/995169/downloading-a-log...
   Page 144: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9f4ff93b-6a27-11ef-bfe5-fa163e...

[mrflow1]

Thank you very much for your response.

I thought that downloading in csv was not allowed from the gui.

I apreciate it.