Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
eryo00
New Contributor

syslogd2 settings wiped after synchronization

Hi all, hope someone could help, we forward logs to ForitSEIM and configure syslogd2 also to send logs to Splunk collectors. I noticed when we make policy changes to Traffic VDOM config and then push it out to all FGTs, the syslogd2 server setting get wiped out on all firewalls. We have 11 FGTs and each is configured to use SPLUNK collector’s IP located at firewall’s location, so I have to manually configure syslogd2 on each firewall all over again. Thanks
1 REPLY 1
sw2090
Honored Contributor

Usually that means that you assigned some provisioning template that has the module for this activated in it but nothing set up. That will overwrite the device settings upon rollout.

Happend to me with DNS Settings once...

-- 

"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

-- "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
Labels
Top Kudoed Authors