Sending syslog to log collector

[yeowkm99]

i have enabled syslog logging for 1x FG100E and 1 x FG100F.

but the log collector does not seems to receive any logs from these 2.

Only the main firewall FG401E is able to send logs to the log collector without issues.

is there any limitations for FG100 series ?

[rbraha]

Hi @yeowkm99 

You can run some packet capture or to run debug commands on FGT side ,please check the following KBs that might help.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-and-syslog-communication-check/t...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Syslog-troubleshooting-use-cases/ta-p/3426...

[Skytech1]

There is no limitation on FG-100F to send syslog. Have you checked with a sniffer if the device is trying to send syslog?? 

You can try 

diag sniffer packet any 'port 514' 4 n

if you have a different port configured for sending syslog you can change the 514 to the port number you are using, and seeing if the FG is actually trying to send syslog

[yeowkm99 · Accepted solution]

issue resolved after i add specify interface in the syslog as both are through ipsec tunnels.