View IPS logs in fortigate 5.2.1 with VDOM access

[markmcgloin]

I have just moved to a fortigate 5.2.1 with VDOM access and can't see UTM or IPS logs. Does anyone know where in the menu they should appear  - looking at docs there should be something called either IPS or UTM logs. In v4.3.16, any IPS signatures fired would show in the threat logs

[vmartin_FTNT]

Hello Mark,

I believe that the IPS log only appears in the GUI when it has results. So if nothing has been blocked by your IPS profile, the log will be hidden.

[markmcgloin]

Perhaps that is the case. The IPS logs are showing as 0 size using cli commands even though I have disk logging turned on. I also have the UX configured to use disk logging

Does fortinet provide some link to testing various IPS signatures easily (not AV)

thanks