config log setting global_plugin
Use this command to view or modify global Plugin log export settings. The Plugin framework enables FortiADC to export logs to third-party platforms. Currently, only Kafka is supported.
Note: Plugin configurations can only be created in the GUI under Log & Report > Log Setting > Plugin. The CLI allows you to edit existing entries and adjust log categories, but it does not allow creating new or modify Kafka configurations.
Plugin log export is global in scope. All VDOM log data is exported through the root VDOM, and per-VDOM overrides are not supported.
Syntax
config log setting global_plugin
edit <id>
set status {enable | disable}
set loglevel {critical | error | warning | notification | information | debug}
set event-log-status {enable | disable}
set event-log-category {configuration admin system user health_check slb llb glb firewall all}
set traffic-log-status {enable | disable}
set traffic-log-category {slb glb llb all}
set attack-log-status {enable | disable}
set attack-log-category {ddos ipreputation waf geo av ztna ips fw all}
set type kafka
set config <string>
next
end
| status | Enable or disable the Kafka plugin. |
|
loglevel |
Select the minimum severity level of logs to export:
The exported logs will include the selected severity level and above. For example, if you select error, the system collects logs with severity level Error and Critical. |
|
event-log-status |
Enable or disable event log export. |
|
event-log-category |
If event-log-status is enabled, the event-log-category becomes configurable. Select one or more of the following event categories to include in the event logs export:
|
|
traffic-log-status |
Enable or disable traffic log export. |
|
traffic-log-category |
If traffic-log-status is enabled, the traffic-log-category becomes configurable. Select one or more of the following traffic categories to include in the traffic logs export:
|
|
attack-log-status |
Enable or disable security log export. |
|
attack-log-category |
If attack-log-status is enabled, the attack-log-category becomes configurable. Select one or more of the following security categories to include in the security logs export:
|
| type |
Plugin type. Only kafka is supported. |
| config |
Internal reference to the Kafka configuration file generated when the Plugin entry is created in the GUI. The value is displayed as The actual Kafka output configuration (in fluent-bit syntax) can only be created and modified in the GUI under Log & Report > Log Setting > Plugin. The CLI cannot create or edit this configuration; it only displays the internal file reference. |
Example
FortiADC-VM # show full log setting global_plugin
config log setting global_plugin
edit 1
set status enable
set type kafka
set config 80.conf
set loglevel information
set event-log-status enable
set event-log-category configuration admin health_check system
set traffic-log-status enable
set traffic-log-category slb dns llb
set attack-log-status enable
set attack-log-category ddos ipreputation waf geo av ips fw ztna
unset comment
next
end