How to delete all logs of internet Browsing from Fortinet UTM ????

[ift38375]

Hello,

  We are using "FortiGate 100D" firewall with "fortianalyzer 100c" for reporting purpose. I want to delete all internet browsing history from Fortianalyzer. I am confused about this Task will perform from which side :  Fortigate  or  Fortianalyzer ? I have done one thing from my side after Googling is that I had given below command on FortiGate Command console: execute log delete-all But still logs are there and showing after search.   so what i need to do ? Please give me exact solution  

[Jeff_FTNT]

Go to FortiAnalyzer GUI:FortiView->Log View->Log Browser , delete log file.

Thanks.

[ift38375]

Jeff_FTNT wrote:

Go to FortiAnalyzer GUI:FortiView->Log View->Log Browser , delete log file.

Thanks.

Hello Jeff,

you mean to say every log stored in Fortianalyzer then what types of log Fortigate have ?

still web browsing logs are showing in my reports ? Why ?

First please clear to me that which store logs (Fortigate or Fortianalyzer) ?

[Jeff_FTNT]

If your FGT have setting like :

config log fortianalyzer setting     set status enable     set server x.x.x.x

end

The log will save on FortiAnalyzer side.

[ift38375]

Jeff_FTNT wrote:

If your FGT have setting like :

config log fortianalyzer setting    set status enable    set server x.x.x.x

end

The log will save on FortiAnalyzer side.

Jeff,  this is configuration command please tell me show command ?

Hello All,

is there anyone who can help me with exact solution ?

[AtiT]

Hi ift38375,

If you want to delete logs from Fortianalyzer go to Log Broswse: see the attached inage FAZ_logbrows.jpg.

Then select the log files you want to delete - deselect the actual files where the logs are stored real-time (if you have real-time logging) - you cannot delete files which are open and in use.

Click the delete button - see the FAZ_delete.jpg.

[AtiT]

Click the delete button - see the FAZ_delete.jpg.

You have to wait some time that the analyzer will remove the logs from the SQL database also.

[AtiT]

You should also clear the cache on the analyzer for the device:

diag sql ...

[ift38375]

AtiT wrote:

You should also clear the cache on the analyzer for the device:

diag sql ...

[attachImg]https://forum.fortinet.com/download.axd?file=0;116597&where=message&f=FAZ_cachce.JPG[/attachImg]

Hello atiT,

where i need to put above command ? please tell me step by step instructions in simple way.

Second question, what kind of logs Fortigate have (not fortianalyzer) ?