Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
shkang1
New Contributor

How to change particular event's syslog severity change

Hi,

I have a question about change of syslog severity.

 

For example, If interface status changes, severity level is warning.

However when the above situation occurs, I want to change the severity level to information.

How can I change particular event's severity level?

My fortigate's version is 7.2.4v.

 

Regards,

 

1 REPLY 1
srajeswaran
Staff
Staff

We cannot change the severity of eventlogs, they are predefined. Any particular reason for changing the severity? We can use filters to skip sending certain logs to the syslog server/Fortianalyzer using filters under syslog config>

config log memory filter
set filter "logid xxxxx" -> Please use the log ID from the event log
set filter-type exclude
end

config log fortianalyzer filter
config free-style
edit 1
set category event
set filter "logid xxxxx" -> Please use the log ID from the event log
set filter-type exclude
next
end
end

Regards,

Suraj

- Have you found a solution? Then give your helper a "Kudos" and mark the solution.

Labels
Top Kudoed Authors