High Availability Cluster Logging; Log Access; Disk Log File Access - Fortinet FortiGate FortiGate-1000A Administration Manual

Fortinet fortigate fortigate-1000a: user guide
Hide thumbs Also See for FortiGate FortiGate-1000A:
Table of Contents

Advertisement

Log & Report

High Availability cluster logging

Log access

Disk log file access

FortiGate-1000A/FA2 Administration Guide
To enable traffic logging for a firewall policy
You can enable traffic logging for a firewall policy. All connections accepted by the
firewall policy are recorded in the traffic log.
1
Go to Firewall > Policy.
2
Select the Edit icon for a policy.
3
Select Log Traffic.
4
Select OK.
5
Make sure you enable traffic log under Log Filter for a logging location and set the
logging severity level to Notification or lower.
When configuring logging with a High Availability (HA) cluster, configure the Primary
unit send logs to the FortiLog unit or a Syslog server. The settings will apply to the
Subordinate units.The subordinate units send the log messages to the Primary unit,
and the Primary unit sends all logs to the FortiLog unit or Syslog server.
If you configured a secure connection via an IPSec VPN tunnel between a FortiLog
unit and an HA cluster, connection is actually between the FortiLog unit and the HA
cluster primary unit.
For more information, see the High Availability Guide available at
http://docs.forticare.com/fgt.html.
Log Access provides access to log messages saved to the FortiGate disk or to the
memory buffer. You can delete, view, search, and navigate logs.
Note: FortiGate units do not save some types of logs to memory. You can view these
log messages with Log Access only if your FortiGate unit contains a hard disk drive.
On its disk, the FortiGate unit saves log messages in files. To view log messages, you
must first select the file to open. You can also delete a file, clear (remove the log
messages from) a file, or download a file in either plain text or CSV format.
You can view the log messages in a memory buffer simply by accessing the buffer.
You cannot delete or download log messages from the memory buffer.
This section describes:
Disk log file access
Viewing log messages
Searching log messages
You can view, navigate, and download logs saved to the FortiGate disk.
01-28011-0254-20051115
High Availability cluster logging
371

Advertisement

Table of Contents
loading

Table of Contents