FortiAnalyzer Backups

[smayberry]

I'm looking for a solution/tactic to backup my FortiAnalyzers.

Currently running two 3000 FortiAnalyzers in Analyzer mode (v5.2.x). Approximately 6TB of data right now between the two.  Taking log data from numerous devices in the field.  Log retention is currently set to 90 Days, and monthly we run a batch of reports for these devices, as well as ad hoc reports.

What is the best way to keep my log data backed up, what options are others using, whether it be collector/analyzer mode, or offloading to a seperate device? Manually moving logs via SCP/SFTP/FTP is not feasible, so that is out.

[hzhao_FTNT]

Hi there, have you tried to upload your logs when log file rolled? From GUI, System settings -> Advanced -> Device Log Settings -> "Upload logs using a standard file transfer protocol".

regards,

hz

[emnoc]

Manually moving logs via SCP/SFTP/FTP is not feasible, so that is out.

Actually scp/ftp/tftp are the best methods for moving files and is simple and effective.

e.g

execute  backup logs all

The webGUI still uses  SCP/FTP for example just that you can apply a scheduler. The same exists in the fortimail . Only downside you can not specify to rollup servers.

I've asked for a feature request numerous times for this function btw.

[Mikael_A]

We are using Cattools from solarwinds. Logs on (in our case) once a month to backup the logs to a server using scp and a folder that is created every month based on the date.