execute export logs

Use this command to export the FortiNDR debug logs into a single compressed archive file. This helps gather diagnostic logs in an organized manner, to facilitate issue analysis, troubleshooting, and system verification. By default, the archive is secured with the password fndrlog.

If the unzip utility is installed on the system, users can extract the archive using the following command: unzip -P fndrlog <filename-to-be-saved>.

Syntax

execute export logs {disk|scp|ftp|tftp} <filename-to-be-saved> <server>[:ftp port] <user-name> <password>

Variable	Description
disk	The local disk. Please ensure the storage device has sufficient capacity and contains a single partition formatted with the EXT3 or EXT4 file system. In the root directory, create an empty file with the same name as the <filename-to-be-saved> that user plans to generate.
ftp	The FTP server.
scp	The SCP server.
tftp	The TFTP server.

Using tftp, ftp, or scp: Please ensure the target server allows file uploads (write permissions are required) and the destination path must not already exist on the server.