Logging to a remote syslog server per VDOM

[tufin]

Hi all, I have a fortigate 80C unit running this image (v4.0,build0279,100519 (MR2 Patch 1)) and two VDOMs, I would like to have each VDOM send its respective syslog messages to a different syslog server (including traffic logs). My unit' s log&reports tab in the VDOM level has this text " Local Logging & Archiving" (LOCAL), only in the Global level it would be " Remote Logging & Archiving" (REMOTE). please help thanks

[rocampo]

Hi, This can be done via CLI. Login to your VDOM via CLI. Below sample configuration for the VDOM to override the syslog settings under global. config log syslogd override-setting set override enable set status enable set server " 192.168.0.253" set reliable disable set port 514 set csv disable set facility local7 set source-ip 0.0.0.0 end

[tufin]

the syslog settings under global.

Hi, thanks for your help, I configured my unit with the configuration example but it didn' t work for me. I' ll try to do it on another Forti unit and post the results

[tufin]

Hello rocampo, it doesn' t work for me, here is my VDOM' s configuration (via CLI) - (ip addr 172.16.20.40 can reach 172.16.20.124) config log syslogd override-setting set override enable set status enable set server " 172.16.20.40" set reliable disable set port 514 set csv disable set facility local7 set source-ip 172.16.20.124 end please help

[DW_FTNT]

this is now a featurein 6.2

https://docs.fortinet.com/document/fortigate/6.2.0/new-features/972129/multiple-fortianalyzer-or-sys...