Viewing Cluster Sessions; Viewing And Managing Cluster Log Messages - Fortinet FortiGate FortiGate-800 Installation And Configuration Manual

Managing an HA cluster

Viewing cluster sessions

Viewing and managing cluster log messages

82
To view the cluster communication sessions
1 Connect to the cluster and log into the web-based manager.
2 Go to System > Status > Session.
The session table displays the sessions processed by the primary unit in the cluster,
including HA communication sessions between the primary unit and the subordinate
units. HA communications use:
• Port 702 as the destination port,
• From and To IP address on the 10.0.0.0 subnet.
During cluster negotiation, the HA interface of each cluster unit is assigned an IP
address. The IP address of the primary unit is 10.0.0.1. The IP address of the first
subordinate unit is 10.0.0.2. The IP address of the second subordinate unit is
10.0.0.3 and so on.
To view log messages for each cluster member
1 Connect to the cluster and log into the web-based manager.
2 Go to Log&Report > Logging.
The cluster displays the primary unit Traffic log, Event log, Attack log, Antivirus log,
Web Filter log, and Email Filter log.
The pull-down list at the upper right of the display identifies the unit for which logs are
displayed. The primary unit is identified as Local and the other units in the cluster are
listed by serial number.
3 Select the serial number of one of the units in the cluster to display the logs for this
cluster unit.
You can view logs saved to memory or logs saved to the hard disk, depending on the
configuration of the cluster unit.
4 For each cluster unit:
• If the cluster unit logs to memory you can view, search, and manage log
messages. For more information, see
page 317.
• If the cluster unit contains a hard disk you can view, search, and manage log
messages. For more information, see:
"Viewing and managing logs saved to the hard disk" on page 318
"Downloading a log file to the management computer" on page 320
"Deleting all messages from an active log" on page 320
"Deleting a saved log file" on page 320
"Viewing logs saved to memory" on
High availability
Fortinet Inc.