Realtime logging to FortiCloud

[bmekler]

Is it possible to log to FortiCloud in realtime for units with storage in them, such as 100D? It' s a major annoyance to have to wait until the next day to see any logs, particularly if you need to troubleshoot - you can' t see the local logs, and FortiCloud seems to be daily at best.

[simonorch]

Unless they changed something recently you can upload logs in realtime. They won' t tick in in realtime as they do in fortianalyzer but a screen refresh works almost as well.

[bmekler]

100D running 4.3.12 doesn' t give me this option - in the GUI, I can pick between daily/weekly/monthly, and in the CLI, the upload-option setting (store-and-upload/realtime) is missing.

[simonorch]

Ok, well it' s there in 5.0

[AtiT]

Hi bmekler, See the following link: http://kb.fortinet.com/kb/microsites/microsite.do?cmd=displayKC&externalId=FD33523 basicly try this: # config log fortianalyzer setting # set upload-option realtime # end Regars,

[DirtyBlueshirt]

A correction to FortiCloud uploading would be: # config log fortiguard setting However, the set options for timing are only " set upload-interval [daily/weekly/monthly]" and " set upload-time [hh:mm]" . " realtime" turns back an error.

[bmekler]

# config log fortianalyzer setting (setting) # set upload-option realtime command parse error before ' upload-option' Command fail. Return code -61