Fortinet white logo
Fortinet white logo

CLI Reference

7.2.2

config log setting

config log setting

Configure general log settings.

Syntax

config log setting
    set custom-log-fields <field-id1>, <field-id2>, ...
    set expolicy-implicit-log [enable|disable]
    set fwpolicy-implicit-log [enable|disable]
    set fwpolicy6-implicit-log [enable|disable]
    set log-policy-comment [enable|disable]
    set resolve-ip [enable|disable]
    set resolve-port [enable|disable]
    set syslog-override [enable|disable]
end

Parameters

Parameter

Description

Type

Size

Default

custom-log-fields <field-id>

Custom fields to append to all log messages.

Custom log field.

string

Maximum length: 35

expolicy-implicit-log

Enable/disable explicit proxy firewall implicit policy logging.

option

-

disable

Option

Description

enable

Enable explicit proxy firewall implicit policy logging.

disable

Disable explicit proxy firewall implicit policy logging.

fwpolicy-implicit-log

Enable/disable implicit firewall policy logging.

option

-

disable

Option

Description

enable

Enable implicit firewall policy logging.

disable

Disable implicit firewall policy logging.

fwpolicy6-implicit-log

Enable/disable implicit firewall policy6 logging.

option

-

disable

Option

Description

enable

Enable implicit firewall policy6 logging.

disable

Disable implicit firewall policy6 logging.

log-policy-comment

Enable/disable inserting policy comments into traffic logs.

option

-

disable

Option

Description

enable

Enable inserting policy comments into traffic logs.

disable

Disable inserting policy comments into traffic logs.

resolve-ip

Enable/disable adding resolved domain names to traffic logs if possible.

option

-

disable

Option

Description

enable

Enable adding resolved domain names to traffic logs.

disable

Disable adding resolved domain names to traffic logs.

resolve-port

Enable/disable adding resolved service names to traffic logs.

option

-

enable

Option

Description

enable

Enable adding resolved service names to traffic logs.

disable

Disable adding resolved service names to traffic logs.

syslog-override

Enable/disable override Syslog settings.

option

-

disable

Option

Description

enable

Enable override Syslog settings.

disable

Disable override Syslog settings.

config log setting

config log setting

Configure general log settings.

Syntax

config log setting
    set custom-log-fields <field-id1>, <field-id2>, ...
    set expolicy-implicit-log [enable|disable]
    set fwpolicy-implicit-log [enable|disable]
    set fwpolicy6-implicit-log [enable|disable]
    set log-policy-comment [enable|disable]
    set resolve-ip [enable|disable]
    set resolve-port [enable|disable]
    set syslog-override [enable|disable]
end

Parameters

Parameter

Description

Type

Size

Default

custom-log-fields <field-id>

Custom fields to append to all log messages.

Custom log field.

string

Maximum length: 35

expolicy-implicit-log

Enable/disable explicit proxy firewall implicit policy logging.

option

-

disable

Option

Description

enable

Enable explicit proxy firewall implicit policy logging.

disable

Disable explicit proxy firewall implicit policy logging.

fwpolicy-implicit-log

Enable/disable implicit firewall policy logging.

option

-

disable

Option

Description

enable

Enable implicit firewall policy logging.

disable

Disable implicit firewall policy logging.

fwpolicy6-implicit-log

Enable/disable implicit firewall policy6 logging.

option

-

disable

Option

Description

enable

Enable implicit firewall policy6 logging.

disable

Disable implicit firewall policy6 logging.

log-policy-comment

Enable/disable inserting policy comments into traffic logs.

option

-

disable

Option

Description

enable

Enable inserting policy comments into traffic logs.

disable

Disable inserting policy comments into traffic logs.

resolve-ip

Enable/disable adding resolved domain names to traffic logs if possible.

option

-

disable

Option

Description

enable

Enable adding resolved domain names to traffic logs.

disable

Disable adding resolved domain names to traffic logs.

resolve-port

Enable/disable adding resolved service names to traffic logs.

option

-

enable

Option

Description

enable

Enable adding resolved service names to traffic logs.

disable

Disable adding resolved service names to traffic logs.

syslog-override

Enable/disable override Syslog settings.

option

-

disable

Option

Description

enable

Enable override Syslog settings.

disable

Disable override Syslog settings.