Fortinet Fortigate-5000 series - Logging to Fortiguard Log and Analysis Server

FortiGate Version 3.0 MR4 Administration Guide
414 01-30004-0203-20070102
Storing Logs Log&Report
Example
This example shows how to enable logging to a WebTrends server and to set an
IP address for the server.
config log webtrends setting
set status enable
set server 220.210.200.190
end
See the Log chapter in the FortiGate CLI Reference for details on setting the
options for the types of logs sent to WebTrends.
Logging to FortiGuard Log and Analysis server
You can enable logging to the FortiGuard Log & Analysis server after subscribing
to receive FortiGuard Log & Analysis services.
To enable logging to the FortiGuard Log & Analysis server
1 Go to System > Maintenance > FortiGuard Center.
2 Select the blue arrow to expand Log & Analysis Options.
3 Select the link in the sentence, To configure FortiGuard Log & Analysis options,
please click here.
You are redirected to Log&Report > Log Config > Log Setting.
4 Select the blue arrow to expand the FortiGuard Log & Analysis options.
5 Select the FortiGuard Log & Analysis checkbox on the Log Setting page.
6 Select to either overwrite or stop logging from the When Log disk is full drop-down
list.
7 Select a minimum severity level from the Minimum severity level drop-down list.
8 Select Apply.
After enabling logging, it is recommended to verify your connection by selecting
Update Now in Antivirus and IPS Downloads options on the FortiGuard Center
page. You can also restart your FortiGate unit in the event selecting Update Now
is unsuccessful.
You can view your connection to the FortiGuard Log and Analysis server in
System > Maintenance > FortiGuard Center. In the System Resources
category, a pie chart displays the percentage of used space on the FortiGuard Log
& Analysis server. You can also view the amount of space used and available
when you expand the FortiGuard Log & Analysis options on the Log Settings
page.
Keywords and variables Description Default
server <address_ipv4> Enter the IP address of the WebTrends
server that stores the logs.
No default.
status
{disable | enable}
Enter enable to enable logging to a
WebTrends server.
disable
Note: The FortiGate unit requires a valid license before logging to the FortiGuard Log &
Analysis server.