You can configure supported devices to send logs to the FortiAnalyzer device. These devices are displayed in the root ADOM as unregistered devices. You can quickly view unregistered devices by clicking Unregistered Devices in the quick status bar. When you manually add an unregistered device to the FortiAnalyzer unit, the device is registered with the FortiAnalyzer unit and can start receiving logs from the device.
When ADOMs are enabled, you can assign the device to an ADOM. When manually adding multiple devices at one time, they are all added to the same ADOM.
When you delete a device or VDOM from the FortiAnalyzer unit, its raw log files are also deleted. SQL database logs are not deleted.
To manually add devices:
- In the root ADOM, go to Device Manager and click Unregistered Devices in the quick status bar. The content pane displays the unregistered devices.
- Select the unregistered device or devices, then click Add. The Add Device dialog box opens.
- If ADOMs are enabled, select the ADOM in the Add the following device(s) to ADOM list. If ADOMs are disabled, select root.
- Click OK to register the device or devices.
The device or devices are added and FortiAnalyzer can start receiving logs from the device or devices.