Fortigate not showing any logs for HA

[ganesh_karale]

Fortigate not showing any logs in Events >> HA Events.

Checked the same in FAZ and there also it is not showing any log for HA.

Both device are showing status Synchronized in HA section.

Trying to check ha history "diagnose sys ha history " but that is also not showing any output.

Please guide.. 

[fricci_FTNT]

Excellent news, I'm glad I could help!

[Debbie_FTNT]

Hey Ganesh,

this maybe a stupid thing to check, but:

Your FortiGates are 100E models, with no disk, correct?

Can you check your logging configuration?

#show full log memory filter

#show full log fortianalyzer filter

-> by default, logging to memory (on devices with no disk) is set to severity warning, and the HA logs are below that threshold, so they would not be saved locally on FortiGate. They should still be sent to FortiAnalyzer with default filter settings, but we don't know your configuration.

Cheers,

Deborah

[ganesh_karale]

Dear Deborah,

Yes log hard disk is not available. But in system events apart from HA events all other events are available.

In FAZ also the same situation

Please find below command details and snap for your reference.

===============================

config log memory filter
set severity information
set forward-traffic enable
set local-traffic disable
set multicast-traffic enable
set sniffer-traffic enable
set ztna-traffic enable
set anomaly enable
set voip enable
end

===============================

config log fortianalyzer filter
set severity information
set forward-traffic enable
set local-traffic enable
set multicast-traffic enable
set sniffer-traffic enable
set ztna-traffic enable
set anomaly enable
set voip enable
set dlp-archive enable
end

===============================