Log filtering

[saharawolf]

hello everyone, i have a server running an application that send broadcasts on a UDP port. everytime the firewall blocks the broadcast (wich is normal) but it logs the blocked trafic, and this make a lot of registration on the log wich became full quickly. Is there any way to exclude the server from beeing logged by the forti? Thank you

[oheigl]

Hello! Are you running MR3? Have you already disabled the extended-traffic-log?

config log disk filter
 set extended-traffic-log disable
 end
 
 config log memory filter
 ...
 
 config log fortianalyzer filter
 ...

Kind regards

[saharawolf]

hello, I disabled the extended-traffic log but nothing changed, i always see the same packets in the log. Any advice. And yes am on V4 MP3 P5 thanks

[oheigl]

I assume you have also not enabled log violation log, isn' t it? Or do you have logging enabled on the default any any deny rule? Can you copy the raw log message in the thread?