FortiManager Event Logs

[adeboer]

Hey All,

I'm trying to figure out how to delete FortiManager Event Logs. I currently have over 42,000 event logs and the oldest one is from 1/3/2016. It seems like a lot of them are "FortiGuard service event Receive an update package from FDS". Is there a way to stop the "fortiguard service" event logs or is there a log rollover setting for event logs? I have already done this for "Task Monitor".

Alan

[scao_FTNT]

you can disable some from

FMG200D # conf system locallog disk filter (filter)# set  devcfg     Log device configuration message.  devops     Managered devices operations messages.  dm         Log deployment manager message.  dvm        Log device manager messages.  epmgr      Log endpoint manager message.  event      Log event messages.  faz        Log Fortianalyzer messages.  fgd        Log FortiGuard service message.  fgfm       Log FGFM protocol message.  fmgws      Log web service messages.  fmlmgr     Log FortiMail manager message.  fmwmgr     Log firmware manager message.  glbcfg     Log global database message.  ha         Log HA message.  iolog      Log debug IO log message.  logd       Log the status of log daemon.  lrmgr      Log log and report manager message.  objcfg     Log object configuration change message.  rev        Log revision history message.  rtmon      Log real-time monitor message.  scfw       Log firewall objects message.  scply      Log policy console message.  scrmgr     Log script manager message.  scvpn      Log VPN console message.  system     Log system manager message.  webport    Log web portal message. (filter)# set

for example, set fgd disable

Thanks

Simon

[adeboer]

Thanks for the quick response as usual!