Log Message Levels; Filtering Log Messages - Fortinet FortiGate 50A Installation And Configuration Manual

Logging and reporting

Log message levels

Filtering log messages

FortiGate-50A Installation and Configuration Guide
Table 23 lists and describes FortiGate log message levels.
Table 23: FortiGate log message levels
Levels Description
0 - Emergency The system has become unstable.
1 - Alert Immediate action is required.
2 - Critical Functionality is affected.
3 - Error An error condition exists and
functionality could be affected.
4 - Warning Functionality could be affected.
5 - Notice Information about normal events.
6 - Information General information about system
operations.
You can configure the logs that you want to record and the message categories that
you want to record in each log.
To filter log entries
1 Go to Log&Report > Log Setting.
2 Select Config Policy for the log location that you selected in
page 251.
3 Select the log types that you want the FortiGate unit to record.
Traffic Log
Event Log
Virus Log
Web Filtering Log Record activity events, such as URL and content blocking, and exemption
Attack Log
Email Filter Log
Update
Record all connections to and through the interface.
To configure traffic filtering, see
Record management and activity events in the event log.
Management events include changes to the system configuration as well
as administrator and user logins and logouts. Activity events include
system activities, such as VPN tunnel establishment and HA failover
events.
Record virus intrusion events, such as when the FortiGate unit detects a
virus, blocks a file type, or blocks an oversized file or email.
of URLs from blocking.
Record attacks detected by the NIDS and prevented by the NIDS
Prevention module.
Record activity events, such as detection of email that contains unwanted
content and email from unwanted senders.
Record log messages when the FortiGate connects to the FDN to
download antivirus and attack updates.
Filtering log messages
Generated by
Emergency messages not
available.
NIDS attack log messages.
DHCP
Error messages not available.
Antivirus, Web filter, email filter, and
system event log messages.
Antivirus, Web filter, and email filter
log messages.
Antivirus, Web filter, email filter log
messages, and other event log
messages.
"Recording logs" on
"Adding traffic filter entries" on page 256.
253