How to view FortiAnalyzer Logs from VMDK

[digifor]

Hi all,

I have a VMDK Image from a FortiAnalyzer, which contains FortiGate logs.

The data is not stored in raw format and cannot be viewed with a text editor.

I do not have the credentials to login to the virtual machine.

How can I view the logs? Do I have to setup a FortiAnalyzer and import specific files by hand?

Thanks in advance!

[AEK]

Hi

As this is not documented I guess you need to open a ticket with Fortinet support.

[vraev]

Hi,

Yes, one way is export and then to import them as it is shown in the following article. Then in the new FortiAnalyzer you should create new devices with the SN of the FGT's so the imported logs become visible.
https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Backup-and-restore-of-FortiAnalyzer-se...