View real time logs

[Jasonhilt]

Just updated to 5.0.9 on our Fortianalyzer 1000c and can't seem to find where to view the real time logs as they come across.

I use this feature to live monitor student activity at times.  

Where can I see the real time logs?

[scao_FTNT · Accepted solution]

Hi, Jasonhilt:

On FAZ, pls enter "FortiView" tab and in left tree, there has "Log View" section in bottom, enter "Log View", then choose a log type, for example, traffic log, then in right side, there has a "Tools", button, click and you will see "Real-Time Log" function

Thanks

Simon

[Jasonhilt]

Wow....that was easy...Not sure how I missed that.  Probably due to all the other problems I had just trying to get the analyzer and fortigate to talk to each other.

Thanks a bunch!!!!

[Baptiste]

scao_FTNT wrote:

Hi, Jasonhilt:

On FAZ, pls enter "FortiView" tab and in left tree, there has "Log View" section in bottom, enter "Log View", then choose a log type, for example, traffic log, then in right side, there has a "Tools", button, click and you will see "Real-Time Log" function

Thanks

Simon

Thanks, I was also looking at Log View.

IMO bottom is not the best place for a tab, especially when there is only one.

I konw it's same design on FG, but there's more tabs so you can't miss them

[scao_FTNT]

IMO bottom is not the best place for a tab, especially when there is only one.

  -- Hi, Baptiste, in 5.2.1, we will add a new "Custom View" section in left tree that bottm, thus left tree will have 3 items, may improve this display

Summary View

Log View

Custom View

thanks

Simon

[wolfiru]

I have an FortiAnalyzer-200D which I migrated back to Firmware 5.0.6 after having problems with Firmware 5.2.x

Since that, nothing is displayed in the "Log View" window. There's only a white page and the left menu under "Log View" is also empty and nothing is displayed.

I've tried to do an factory reset, but also without success. Nothing is displayed any more.

I am not sure, what else I could try. Any hints? Thank you,

Wolfgang

[scao_FTNT]

Hi, Wolfgang

Downgrade FAZ from 5.2 to 5.0, we need to reset + format

exec reset all-settings

exec format disk-ext4

then you can restore old backup (backup from 5.0.6)

Thanks

Simon