Fortinet black logo

CLI reference

Show and show full-configuration commands

Show and show full-configuration commands

Show commands display the FortiNDR configuration that is changed from the default setting. Unlike get commands, show commands do not display settings that remain in their default state.

For example, you might show the current DNS settings:

show system dns

config system dns

set primary 172.16.1.10

end

If the command does not display the secondary DNS server settings, that indicates that it has not been configured or has reverted to its default value.

Show full-configuration commands display the full configuration including default settings. While similar to get commands, show full-configuration output uses configuration file syntax.

For example, you might show the current DNS settings, including settings that remain at their default values (in bold below):

show full-configuration system dns

config system dns

set primary 172.16.1.10

set secondary 172.16.1.11

set private-ip-query disable

set cache enable

end

Depending on whether you specify an object, the show command displays either the configuration that you have just entered but not yet saved or the configuration as it currently exists on disk.

For example, immediately after configuring the secondary DNS server setting but before saving it, show displays two outputs (differences in bold):

config system dns

set secondary 192.168.1.10

show

config system dns

set primary 172.16.1.10

set secondary 192.168.1.10

end

show system dns

config system dns

set primary 172.16.1.10

end

The first output indicates the value that you have configured but not yet saved; the second output indicates the value that was last saved to disk.

If you have entered settings but cannot remember how they differ from the existing configuration, the two different forms of show, with and without the object name, can be a useful reminder.

Show and show full-configuration commands

Show commands display the FortiNDR configuration that is changed from the default setting. Unlike get commands, show commands do not display settings that remain in their default state.

For example, you might show the current DNS settings:

show system dns

config system dns

set primary 172.16.1.10

end

If the command does not display the secondary DNS server settings, that indicates that it has not been configured or has reverted to its default value.

Show full-configuration commands display the full configuration including default settings. While similar to get commands, show full-configuration output uses configuration file syntax.

For example, you might show the current DNS settings, including settings that remain at their default values (in bold below):

show full-configuration system dns

config system dns

set primary 172.16.1.10

set secondary 172.16.1.11

set private-ip-query disable

set cache enable

end

Depending on whether you specify an object, the show command displays either the configuration that you have just entered but not yet saved or the configuration as it currently exists on disk.

For example, immediately after configuring the secondary DNS server setting but before saving it, show displays two outputs (differences in bold):

config system dns

set secondary 192.168.1.10

show

config system dns

set primary 172.16.1.10

set secondary 192.168.1.10

end

show system dns

config system dns

set primary 172.16.1.10

end

The first output indicates the value that you have configured but not yet saved; the second output indicates the value that was last saved to disk.

If you have entered settings but cannot remember how they differ from the existing configuration, the two different forms of show, with and without the object name, can be a useful reminder.