Fortinet Document Library
Version:
6.4.4
6.4.3
6.4.2
Version:
6.4.1
6.4.0
6.2.7
Version:
6.2.6
6.2.5
6.2.3
Version:
6.2.2
6.2.1
6.2.0
Version:
6.0.9
6.0.8
6.0.7
Version:
6.0.6
6.0.5
6.0.4
Version:
6.0.3
6.0.2
6.0.1
Version:
6.0.0
5.6.10
5.6.9
Version:
5.6.8
5.6.8
5.6.7
Version:
5.6.7
5.6.6
5.6.6
Version:
5.6.5
5.6.5
5.6.4
Version:
5.6.4
5.6.3
5.6.3
Version:
5.6.2
5.6.2
5.6.1
Version:
5.6.1
5.6.0
5.6.0
Version:
5.4.7
5.4.6
5.4.5
Version:
5.4.5
5.4.4
5.4.4
Version:
5.4.3
5.4.3
5.4.2
Version:
5.4.2
5.4.1
5.4.1
Version:
5.4.0
5.4.0
5.2.10
Version:
5.2.9
5.2.9
5.2.7
Version:
5.2.7
5.2.6
5.2.6
Version:
5.2.5
5.2.5
5.2.4
Version:
5.2.4
5.2.3
5.2.3
Version:
5.2.2
5.2.1
5.2.0
Version:
5.0.13
5.0.13
5.0.11
Version:
5.0.11
5.0.10
5.0.9
Version:
5.0.8
5.0.7
5.0.6
Version:
5.0.5
5.0.4
5.0.3
Version:
5.0.2
5.0.1
4.3.0
Version:
4.2.0
4.1.0
4.0.0
Table of Contents
Introduction
FortiAnalyzer documentation
What’s New in FortiAnalyzer 6.0
FortiAnalyzer version 6.0.1
FortiAnalyzer version 6.0.0
Using the Command Line Interface
CLI command syntax
Connecting to the CLI
CLI objects
CLI command branches
CLI basics
Command help
Command tree
Command completion
Recalling commands
Editing commands
Line continuation
Command abbreviation
Environment variables
Encrypted password support
Entering spaces in strings
Entering quotation marks in strings
Entering a question mark (?) in a string
International characters
Special characters
IPv4 address formats
Changing the baud rate
Debug log levels
Administrative Domains
About ADOMs
Configuring ADOMs
system
admin
admin group
admin ldap
admin profile
admin radius
admin setting
admin tacacs
admin user
alert-console
alertemail
alert-event
auto-delete
backup all-settings
central-management
certificate
certificate ca
certificate crl
certificate local
certificate oftp
certificate ssh
dns
fips
fortiview
setting
auto-cache
global
Syntax
Example
Time zones
ha
interface
locallog
locallog setting
locallog disk setting
locallog filter
locallog fortianalyzer (fortianalyzer2, fortianalyzer3) setting
locallog memory setting
locallog syslogd (syslogd2, syslogd3) setting
log
log alert
log ioc
log mail-domain
log settings
log-fetch
log-fetch client-profile
log-fetch server-setting
log-forward
log-forward-service
mail
metadata
ntp
password-policy
report
report auto-cache
report est-browse-time
report group
report setting
route
route6
snmp
snmp community
snmp sysinfo
snmp user
sql
syslog
workflow approval-matrix
fmupdate
analyzer
av-ips
av-ips advanced-log
av-ips web-proxy
custom-url-list
disk-quota
fct-services
fds-setting
multilayer
publicnetwork
server-access-priorities
server-override-status
service
web-spam
web-spam fgd-setting
web-spam web-proxy
execute
add-mgmt-license
add-vm-license
backup
bootimage
certificate
certificate ca
certificate local
console
date
device
erase-disk
factory-license
fmupdate
Syntax
fmupdate cdrom
format
iotop
iotps
log
log adom disk-quota
log device disk-quota
log device logstore
log device permissions
log device vdom
log dlp-files
log import
log ips-pkt
log quarantine-files
log storage-warning
log-aggregation
log-fetch
log-fetch client
log-fetch server
log-integrity
lvm
migrate
ping
ping6
raid
reboot
remove
reset
restore
sensor
shutdown
sql-local
sql-query-dataset
sql-query-generic
sql-report
ssh
ssh-known-hosts
tac
time
top
Syntax
Help menu
traceroute
traceroute6
diagnose
auto-delete
cdb
debug
debug application
debug backup-oldformat-script-logs
debug cli
debug console
debug crashlog
debug disable
debug enable
debug info
debug klog
debug reset
debug service
debug sysinfo
debug sysinfo-log
debug sysinfo-log-backup
debug sysinfo-log-list
debug timestamp
debug vminfo
dlp-archives
dvm
dvm adom
dvm capability
dvm chassis
dvm check-integrity
dvm csf
dvm debug
dvm device
dvm device-tree-update
dvm extender
dvm fap
dvm fsw
dvm group
dvm lock
dvm proc
dvm remove
dvm supported-platforms
dvm task
dvm transaction-flag
dvm workflow
fmnetwork
fmnetwork arp
fmnetwork interface
fmnetwork netstat
fmupdate
fortilogd
fwmanager
ha
hardware
log
pm2
report
sniffer
sql
system
test
test application
test connection
test policy-check
test search
test sftp
upload
upload clear
upload status
vpn
get
fmupdate analyzer
fmupdate av-ips
fmupdate device-version
fmupdate disk-quota
fmupdate fct-services
fmupdate fds-setting
fmupdate multilayer
fmupdate publicnetwork
fmupdate server-access-priorities
fmupdate server-override-status
fmupdate service
fmupdate support-pre-fgt43
fmupdate web-spam
system admin
system alert-console
system alertemail
system alert-event
system auto-delete
system backup
system central-management
system certificate
system dns
system fips
system fortiview
system global
system ha
system interface
system locallog
system log
system log-fetch
system log-forward
system log-forward-service
system loglimits
system mail
system metadata
system ntp
system password-policy
system performance
system report
system route
system route6
system snmp
system sql
system status
system syslog
system workflow
show
Appendix A - Object Tables
Appendix B - CLI Error Codes
Home
FortiAnalyzer 6.0.1
CLI Reference
CLI Reference
Introduction
FortiAnalyzer documentation
What’s New in FortiAnalyzer 6.0
FortiAnalyzer version 6.0.1
FortiAnalyzer version 6.0.0
Using the Command Line Interface
CLI command syntax
Connecting to the CLI
CLI objects
CLI command branches
CLI basics
Command help
Command tree
Command completion
Recalling commands
Editing commands
Line continuation
Command abbreviation
Environment variables
Encrypted password support
Entering spaces in strings
Entering quotation marks in strings
Entering a question mark (?) in a string
International characters
Special characters
IPv4 address formats
Changing the baud rate
Debug log levels
Administrative Domains
About ADOMs
Configuring ADOMs
system
admin
admin group
admin ldap
admin profile
admin radius
admin setting
admin tacacs
admin user
alert-console
alertemail
alert-event
auto-delete
backup all-settings
central-management
certificate
certificate ca
certificate crl
certificate local
certificate oftp
certificate ssh
dns
fips
fortiview
setting
auto-cache
global
Syntax
Example
Time zones
ha
interface
locallog
locallog setting
locallog disk setting
locallog filter
locallog fortianalyzer (fortianalyzer2, fortianalyzer3) setting
locallog memory setting
locallog syslogd (syslogd2, syslogd3) setting
log
log alert
log ioc
log mail-domain
log settings
log-fetch
log-fetch client-profile
log-fetch server-setting
log-forward
log-forward-service
mail
metadata
ntp
password-policy
report
report auto-cache
report est-browse-time
report group
report setting
route
route6
snmp
snmp community
snmp sysinfo
snmp user
sql
syslog
workflow approval-matrix
fmupdate
analyzer
av-ips
av-ips advanced-log
av-ips web-proxy
custom-url-list
disk-quota
fct-services
fds-setting
multilayer
publicnetwork
server-access-priorities
server-override-status
service
web-spam
web-spam fgd-setting
web-spam web-proxy
execute
add-mgmt-license
add-vm-license
backup
bootimage
certificate
certificate ca
certificate local
console
date
device
erase-disk
factory-license
fmupdate
Syntax
fmupdate cdrom
format
iotop
iotps
log
log adom disk-quota
log device disk-quota
log device logstore
log device permissions
log device vdom
log dlp-files
log import
log ips-pkt
log quarantine-files
log storage-warning
log-aggregation
log-fetch
log-fetch client
log-fetch server
log-integrity
lvm
migrate
ping
ping6
raid
reboot
remove
reset
restore
sensor
shutdown
sql-local
sql-query-dataset
sql-query-generic
sql-report
ssh
ssh-known-hosts
tac
time
top
Syntax
Help menu
traceroute
traceroute6
diagnose
auto-delete
cdb
debug
debug application
debug backup-oldformat-script-logs
debug cli
debug console
debug crashlog
debug disable
debug enable
debug info
debug klog
debug reset
debug service
debug sysinfo
debug sysinfo-log
debug sysinfo-log-backup
debug sysinfo-log-list
debug timestamp
debug vminfo
dlp-archives
dvm
dvm adom
dvm capability
dvm chassis
dvm check-integrity
dvm csf
dvm debug
dvm device
dvm device-tree-update
dvm extender
dvm fap
dvm fsw
dvm group
dvm lock
dvm proc
dvm remove
dvm supported-platforms
dvm task
dvm transaction-flag
dvm workflow
fmnetwork
fmnetwork arp
fmnetwork interface
fmnetwork netstat
fmupdate
fortilogd
fwmanager
ha
hardware
log
pm2
report
sniffer
sql
system
test
test application
test connection
test policy-check
test search
test sftp
upload
upload clear
upload status
vpn
get
fmupdate analyzer
fmupdate av-ips
fmupdate device-version
fmupdate disk-quota
fmupdate fct-services
fmupdate fds-setting
fmupdate multilayer
fmupdate publicnetwork
fmupdate server-access-priorities
fmupdate server-override-status
fmupdate service
fmupdate support-pre-fgt43
fmupdate web-spam
system admin
system alert-console
system alertemail
system alert-event
system auto-delete
system backup
system central-management
system certificate
system dns
system fips
system fortiview
system global
system ha
system interface
system locallog
system log
system log-fetch
system log-forward
system log-forward-service
system loglimits
system mail
system metadata
system ntp
system password-policy
system performance
system report
system route
system route6
system snmp
system sql
system status
system syslog
system workflow
show
Appendix A - Object Tables
Appendix B - CLI Error Codes
6.0.1
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.7
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2.0
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.6.10
5.6.9
5.6.8
5.6.8
5.6.7
5.6.7
5.6.6
5.6.6
5.6.5
5.6.5
5.6.4
5.6.4
5.6.3
5.6.3
5.6.2
5.6.2
5.6.1
5.6.1
5.6.0
5.6.0
5.4.7
5.4.6
5.4.5
5.4.5
5.4.4
5.4.4
5.4.3
5.4.3
5.4.2
5.4.2
5.4.1
5.4.1
5.4.0
5.4.0
5.2.10
5.2.9
5.2.9
5.2.7
5.2.7
5.2.6
5.2.6
5.2.5
5.2.5
5.2.4
5.2.4
5.2.3
5.2.3
5.2.2
5.2.1
5.2.0
5.0.13
5.0.13
5.0.11
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
4.3.0
4.2.0
4.1.0
4.0.0
Download PDF
Copy Link
log
Use the following command to view device log usage.
Syntax
diagnose log device <DEVICE ID>
log
Use the following command to view device log usage.
Syntax
diagnose log device <DEVICE ID>
Link
PDF
TOC