Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Dave_Berger
New Contributor

Unable to get time- or date-specific traffic logs using CLI

Up to 5.0.1 there was the field " timestamp" to grab logs using the CLI. This field was extremly helpful to specify a certain time range:
 fortigate # exec log filter dump
 
 category: traffic
 device: disk
 start-line: 1
 view-lines: 1000
 max-checklines: 0
 field: timestamp:[ 2013-02-19 13:35:00, 2013-02-19 19:00:00,] negate: 0
 
Now with 5.0.2 it seems like the field " timestamp" was replaced by " date" and " time" . However, neither the Logging & Reportig guide nor the CLI guide explain how the arguments have to be specified. We can specify any kind of argument for date/time (there seems to be no input validation at all), but " exec log display" always returns " 0 logs found" . (Of course, when running without filter fields we get results.) Here some of the different versions we already tried:
 exec log filter field date 2013-05-01
 exec log filter field date ' 2013-05-01' 
 exec log filter field date " 2013-05-01" 
 exec log filter field date 2013-04-30-2013-05-01
 exec log filter field date 2013-04-30 2013-05-01
 
Same goes for the field " time" .
0 REPLIES 0
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors