Fortigate sending delayed logs to syslog

[asyraf_zaidi]

Hi All, anyone experiencing issue with Fortigate Firewall sending delayed logs to the syslog server?

I am experiencing an issue where the logs are only coming up 5-10 seconds after the connection has been established. 

Thanks

[AEK]

Hi Zaidi

As far as I know the session log is sent only once it is closed. This is the default behavior.

But as far as I remember there is a way to change this behavior and to log the session once it is created. But I think the default one is the good practice for almost all cases.

[dingjerry_FTNT]

Hi @AEK ,

I think that you are talking about this setting (logtraffic-start) in firewall policy settings.

[AEK]

Thanks Jerry, you are right

And this is why Zaidi is receiving the log seconds after the session starts. Actually he receives the log on session closure.