Fortigate Forward Traffic Log not showing Policy ID Number (x)

[dgullett]

Ver 7.2.3 see pic below

[spoojary]

Have you tried upgrading the firmware. This can be a known issue on the firmware. Also it is recommended to go to the latest version of the FGT. 
what is the FGT model ?

[dgullett]

Model name: FortiGate-80F

Yes I have the same issue on 7.2.5

[Mrinmoy]

What if you select the log and click on details? ID number is showing there?

[dgullett]

It is not in details either 

[Mrinmoy]

Seems like it is a bug. To be more sure you can try to upgrade it to 7.4.0, otherwise you can create a support ticket for bug identification.

[Mrinmoy]

I will also try to reproduce it in my LAB. I will keep you posted.

[Mrinmoy]

Also if possible, share here a row log entry in txt format.

[YBKruthi]

Hi @dgullett 

Check Logging Settings: Make sure that the logging settings for your policies are configured to include the Policy ID in the logs. To do this:

• Log in to your FortiGate firewall's web interface.
• Navigate to "Policy & Objects" > "IPv4 Policy" (or "IPv6 Policy" if applicable).
• Select the policy for which you want to see the Policy ID in the logs.
• In the "Logging Options" section, ensure that "Log Allowed Traffic" or "Log Denied Traffic" is selected, and that the "Policy ID" checkbox is checked.

Thanks,

Kruthi

[srajeswaran · Accepted solution]

You are hitting known issues 861893 . The fix is available from 7.4.0 and 7.2.6.

861893

In Forward Traffic logs, the Policy ID column is blank.

https://docs.fortinet.com/document/fortigate/7.4.0/fortios-release-notes/289806/resolved-issues