Real Time Logs

[Musab]

Hi everyone. 

I'm using the FortiAnalyzer (v6.0.2) to monitor deployed devices on the FortiManager. The problem encountered is that the Logs doesn't update. It's connected, but there is no traffic going through, thus no analyzing can be done.

Your help is much appreciated.

[brazz_FTNT · Accepted solution]

Hello, 

There are couple of points that need to be checked :

[ul]

Are FGTs sending logs real-time to the FAZ?You need to see the log setting 

Logs going out from the FGT ?you need to run sniffer on FGT itself to see if the logs going out from the FGT itself 

Check the which FGTs are sending logs ? Is the IP correct ?

Verify the FAZ compatibility Chart  https://docs.fortinet.com/uploaded/files/2901/fortianalyzer-compatibility.pdf

Check to see if logs are being received by FAZ 

 What is the logging status on FAZ (green, red )

FAZ ADOM is enabled ? Are you in the right ADOM 

What do you see in log view ? Can you switch to realtime and historical logs ? any logs there ?[/ul]

Thanks