log
Use the following commands to configure log settings.
log alert
Use this command to configure log based alert settings.
Syntax
config system log alert
set max-alert-count <integer>
end
Variable |
Description |
---|---|
max-alert-count <integer> |
Maximum number of alerts supported (100 - 10000, default = 1000). |
log ioc
Use this command to configure log based IoC (Indicators of Compromise) settings.
Syntax
config system log ioc
set notification {enable | disable}
set notification-throttle <integer>
set status
end
Variable |
Description |
---|---|
notification {enable | disable} |
Enable/disable IoC notification (default = enable). |
notification-throttle <integer> |
Set the minute value for throttling the rate of IoC notifications (1 - 10080, default = 1440). |
status |
Enable/disable the IoC feature (default = enable). |
log mail-domain
Use this command to configure FortiMail domain settings.
Syntax
config system log mail-domain
edit <id>
set devices <string>
set domain <string>
set vdom <string>
end
Variable |
Description |
---|---|
<id> |
The ID of the FortiMail domain. |
devices <string> |
The device IDs for domain to VDOM mapping, separated by commas (default = All_FortiMails). For example: |
domain <string> |
The FortiMail domain. |
vdom <string> |
The VDOM name that is mapping to the FortiMail domain. |
log settings
Use this command to configure settings for logs.
Syntax
config system log settings
set browse-max-logfiles <integer>
set dns-resolve-dstip {enable | disable}
set download-max-logs <integer>
set FAC-custom-field1 <string>
set FAZ-custom-field1 <string>
set FCH-custom-field1 <string>
set FCT-custom-field1 <string>
set FDD-custom-field1 <string>
set FGT-custom-field1 <string>
set FMG-custom-field1 <string>
set FML-custom-field1 <string>
set FPX-custom-field1 <string>
set FSA-custom-field1 <string>
set FWB-custom-field1 <string>
set ha-auto-migrate {enable | disable}
set import-max-logfiles <integer>
set log-file-archive-name {basic | extended}
set sync-search-timeout <integer>
config rolling-regular
set days {fri | mon| sat | sun | thu | tue | wed}
set del-files {enable | disable}
set directory <string>
set file-size <integer>
set gzip-format {enable | disable}
set hour <integer>
set ip <ipv4_address>
set ip2 <ipv4_address>
set ip3 <ipv4_address>
set log-format {csv | native | text}
set min <integer>
set password <passwd>
set password2 <passwd>
set password3 <passwd>
set server-type {ftp | scp | sftp}
set upload {enable | disable}
set upload-hour <integer>
set upload-mode {backup | mirror}
set upload-trigger {on-roll | on-schedule}
set username <string>
set username2 <string>
set username3 <string>
set when {daily | none | weekly}
end
end
Variable |
Description |
---|---|
browse-max-logfiles <integer> |
Maximum number of log files for each log browse attempt, per ADOM (default = 10000). |
dns-resolve-stip {enable | disable} |
Enable/disable resolving destination IP by DNS (default = disable). |
download-max-logs <integer> |
Maximum number of logs for each log download attempt (default = 100000). |
FAC-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FAZ-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FCH-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FCT-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FDD-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FGT-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FMG-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FML-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FPX-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FSA-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
FWB-custom-field1 <string> |
Enter a name of the custom log field to index (character limit = 31). |
ha-auto-migrate {enable | disable} |
Enabled/disable automatically merging HA member's logs to HA cluster (default = disable). |
import-max-logfiles <integer> |
Maximum number of log files for each log import attempt (default = 10000). |
log-file-archive-name {basic | extended} |
Log file name format for archiving.
|
sync-search-timeout <integer> |
The maximum amount of time that a log search session can run in synchronous mode, in seconds (1 - 86400, default = 60). |
Variables for |
|
days {fri | mon| sat | sun | thu | tue | wed} |
Log files rolling schedule (days of the week). When |
del-files {enable | disable} |
Enable/disable log file deletion after uploading (default = disable). |
directory <string> |
The upload server directory (character limit = 127). |
file-size <integer> |
Roll log files when they reach this size, in megabytes (10 - 1000, default = 200). |
gzip-format {enable | disable} |
Enable/disable compression of uploaded log files (default = disable). |
hour <integer> |
The hour of the day that log files are rolled (0 - 23, default = 0). |
ip <ipv4_address> ip2 <ipv4_address> ip3 <ipv4_address> |
Upload server IPv4 addresses. Configure up to three servers. |
log-format {csv | native | text} |
Format of uploaded log files:
|
min <integer> |
The minute of the hour that log files are rolled (0 - 59, default = 0). |
password <passwd> password2 <passwd> password3 <passwd> |
Upload server log in passwords (character limit = 128). |
server-type {ftp | scp | sftp} |
Upload server type (default = ftp). |
upload {enable | disable} |
Enable/disable log file uploads (default = disable). |
upload-hour <integer> |
The hour of the day that log files are uploaded (0 - 23, default = 0). |
upload-mode {backup | mirror} |
Configure upload mode with multiple servers. Servers are tried then used one after the other upon failure to connect.
|
upload-trigger {on-roll | on-schedule} |
Event triggering log files upload:
|
username <string> username2 <string> username3 <string> |
Upload server log in usernames (character limit = 35). |
when {daily | none | weekly} |
Roll log files periodically:
|