Hi, i have FGT310B (v5.2.3,build670 (GA)) and i can't see the memory logs.
FGT310B (setting) # show full-configuration
config log memory setting
set status enable
set diskfull overwrite
end
FGT310B (setting) # show full
config log setting
set resolve-ip disable
set resolve-port enable
set log-user-in-upper disable
set fwpolicy-implicit-log disable
set fwpolicy6-implicit-log disable
set log-invalid-packet disable
set local-in-allow enable
set local-in-deny-unicast enable
set local-in-deny-broadcast disable
set local-out enable
set daemon-log disable
set neighbor-event disable
set brief-traffic-format disable
set user-anonymize disable
end
And I want to see in syslog server (both: server and memory)
FGT310B (setting) # show
config log syslogd setting
set status enable
set server "192.168.x.x"
set facility audit
end
Any ideas?
Thank you very much.
Condor.
Solved! Go to Solution.
Sorry Condor, I misread your original post. You are already sending your logs do syslog.
Try to run those commands:
# this will show stats about log creation
diag log kernel-stats
# this will create some testing logs
diag log test
and run diag log kernel-stats again to see if had some increase. And check your syslog to see if those logs are there.
'facility' is not the same as 'logging level'. It's just a label to signify the source to the logging device.
Check the CLI options for 'config log memory settings' and 'config log memory filter'.
FYI: 'local traffic' is traffic originating at or detined at the FGT itself.
I know, but is usefull for troubleshoting.
Thanks!
User | Count |
---|---|
2593 | |
1381 | |
800 | |
659 | |
455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.