Fortinet FortiGate FortiGate-50 - Logging and Reporting; Recording Logs; Recording Logs on a Remote Computer

FortiGate-50 Installation and Configuration Guide Version 2.50 MR2
FortiGate-50 Installation and Configuration Guide 221
Logging and reporting
You can configure the FortiGate unit to log network activity from routine configuration
changes and traffic sessions to emergency events. You can also configure the
FortiGate unit to send alert email messages to inform system administrators about
events such as network attacks, virus incidents, and firewall and VPN events.
This chapter describes:
• Recording logs
• Filtering log messages
• Configuring traffic logging
• Configuring alert email
Recording logs
You can configure logging to record logs to one or more of:
• a computer running a syslog server,
• a computer running a WebTrends firewall reporting server,
• the console.
For information about filtering the log types and activities that the FortiGate unit
records, see “Filtering log messages” on page 222. For information about traffic logs,
see “Configuring traffic logging” on page 224.
This section describes:
• Recording logs on a remote computer
• Recording logs on a NetIQ WebTrends server
Recording logs on a remote computer
Use the following procedure to configure the FortiGate unit to record log messages on
a remote computer. The remote computer must be configured with a syslog server.
1 Go to Log&Report > Log Setting.
2 Select Log to Remote Host to send the logs to a syslog server.
3 Type the IP address of the remote computer running syslog server software.
4 Type the port number of the syslog server.