Fortinet 5.0 Patch 6 - page 551

Fortinet 551 FortiWeb 5.0 Patch 6 Administration Guide
Log file
should not
exceed n MB
Type the maximum file size of the current log file.
When the current log file reaches its maximum size, the
next log message received will begin a new, separate file.
The valid range is between 10 MB and 200 MB.
Memory Enable to record log messages in the local random access memory (RAM)
of the FortiWeb appliance.
If the FortiWeb appliance is logging to memory, you can use the web UI to
view log messages that are stored locally on the FortiWeb appliance. For
details, see “Viewing log messages” on page 557.
Note: Only event logs can be stored in the local memory. Attack and traffic
logs cannot be stored in memory.
Caution: Log messages stored in memory should not be regarded as
permanent. All log entries stored in memory are cleared when the
FortiWeb appliance restarts. When available memory space for log
messages is full, the FortiWeb appliance will store any new log message
by overwriting the oldest log message.
Log Level Select the severity level that a log message must equal or
exceed in order to be recorded to this storage location.
For information about severity levels, see “Log severity
levels” on page 544.
Syslog Enable to store log messages remotely on a Syslog server.
Caution: Enabling Syslog could result in excessive log messages being
recorded in Sysl og.
Syslog entries are controlled by Syslog policies and trigger actions
associated with various types of violations. If this option is enabled, but a
trigger action is not selected for a specific type of violation, every
occurrence of that violation will be transmitted to the Syslog server in the
Syslog Policy field.
Note: Logs stored remotely cannot be viewed from the FortiWeb web UI.
Syslog Policy Select the settings to use when storing log messages
remotely. The Syslog settings include the address of the
remote Syslog server and other connection settings. For
more information see “Configuring Syslog settings” on
page 554.
Log Level Select the severity level that a log message must equal or
exceed in order to be recorded to this storage location.
For information about severity levels, see “Log severity
levels” on page 544.
Facility Select the facility identifier that the FortiWeb appliance
will use to identify itself when sending log messages to
the first Syslog server.
To easily identify log messages from the FortiWeb
appliance when they are stored on the Syslog server,
enter a unique facility identifier, and verify that no other
network devices use the same facility identifier.
Setting name Description