How to change particular event's syslog severity change

[shkang1]

Hi,

I have a question about change of syslog severity.

For example, If interface status changes, severity level is warning.

However when the above situation occurs, I want to change the severity level to information.

How can I change particular event's severity level?

My fortigate's version is 7.2.4v.

Regards,

[srajeswaran]

We cannot change the severity of eventlogs, they are predefined. Any particular reason for changing the severity? We can use filters to skip sending certain logs to the syslog server/Fortianalyzer using filters under syslog config>

config log memory filter
set filter "logid xxxxx" -> Please use the log ID from the event log
set filter-type exclude
end

config log fortianalyzer filter
config free-style
edit 1
set category event
set filter "logid xxxxx" -> Please use the log ID from the event log
set filter-type exclude
next
end
end