execute export logs

Use this command to export the FortiNDR debug logs into a single compressed archive file. It helps gather diagnostic logs in an organized manner, thereby facilitating issue analysis, troubleshooting, and system verification. By default, the archive is secured with the password fndrlog.

If the unzip utility is installed on the system, users can extract the archive using the following command: unzip -P fndrlog <filename-to-be-saved>

Syntax

execute export logs {disk|scp|ftp|tftp} <filename-to-be-saved> <server>[:ftp port] <user-name> <password>

Variable	Description	Default
disk	The External storage device ( e.g., USB drive).
ftp	The FTP server.
scp	The SCP server.
tftp	The TFTP server.

When using a disk

Please ensure the storage device has sufficient capacity and contains a single partition formatted with the EXT3 or EXT4 file system. In the root directory, create an empty file with the same name as the <filename-to-be-saved> that you plan to generate.

When using tftp, ftp, or scp

Please ensure the target server allows file uploads (write permissions are required) and the destination path must not already exist on the server.