Hi,
I have a question about change of syslog severity.
For example, If interface status changes, severity level is warning.
However when the above situation occurs, I want to change the severity level to information.
How can I change particular event's severity level?
My fortigate's version is 7.2.4v.
Regards,
We cannot change the severity of eventlogs, they are predefined. Any particular reason for changing the severity? We can use filters to skip sending certain logs to the syslog server/Fortianalyzer using filters under syslog config>
config log memory filter
set filter "logid xxxxx" -> Please use the log ID from the event log
set filter-type exclude
end
config log fortianalyzer filter
config free-style
edit 1
set category event
set filter "logid xxxxx" -> Please use the log ID from the event log
set filter-type exclude
next
end
end
Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.