CLI commands

FortiLog CLI reference

 

 

Commands

Description

 

 

set log client <client_string> deviceid <id_string>

Configure the FortiLog to log a FortiGate client.

secure {yes no} psk <psk_string> space

• <client_string> is the name of the client.

<number> filesz <filesz_integer> fileage

• <id_string> is the FortiGate client ID, for example, the serial number.

<fileage_integer> spacefull {overwrite_oldest

• {yes no} provides the option to configure secured connection or not.

stop_logging}

• <psk_string> is the pre-shared key number.

 

• <number> is the amount of the allocated disk space. Set disk quota

 

from 0 to 4000 MB. A disk quota of 0 is unlimited.

 

• <filesz_integer> is the size limit for the log files. The default log file size

 

is 10 MB.

 

• <fileage> is the time limit for the FortiLog unit to keep the log files. The

 

default log file age is 10 days.

 

• {overwrite_oldest stop_logging} allows you to select what you want

 

the FortiLog unit to do when the allocated disk space for the FortiGate

 

device is used up.

 

 

set log raid <raid_level>

Set the log RAID level: linear, 0, 1, or 5. There is no default value for this

 

option.

 

 

set log raid uuid <raid_uuid>

Set the log RAID universal unique identifier.

 

 

set log devicegroup <string>

Create a device group to add devices to.

 

 

set log setting console loglevel

Set the console log severity level

<severity_integer>

0 = Emergency, 1 = Alert, 2 = Critical, 3 = Error, 4 = Warning, 5 =

 

Notification, 6 = Information

 

The log levels will be up to but not higher than the value you set.

 

 

set log setting local status {enable disable}

Enable or disable logging to the FortiLog unit hard disks.

 

 

set log setting local filesz <file-sz_integer>

Set the maximum size for the Fortilog local log file.

 

 

set log setting local logtime <days_integer>

Set the number of days before the FortiLog unit starts a new log file.

 

 

set log setting local diskfull

 

 

 

set log setting local memory status <enable

Configure the FortiLog unit to log to the local memory.

disable>

 

 

 

set log setting local memory loglevel

Set the local FortiLog unit log severity level

<severity_integer>

0 = Emergency, 1 = Alert, 2 = Critical, 3 = Error, 4 = Warning, 5 =

 

Notification, 6 = Information

 

The log levels will be up to but not higher than the value you set.

 

 

set log setting syslog local status loglevel

Set the local FortiLog unit log severity level

<severity_integer>

0 = Emergency, 1 = Alert, 2 = Critical, 3 = Error, 4 = Warning, 5 =

 

Notification, 6 = Information

 

The log levels will be up to but not higher than the value you set.

 

 

set log setting syslog local status loglevel

Enable or disable CSV format to record log messages to the FortiLog

<severity_integer> csv {enable disable}

unit hard disk in comma-separated value (CSV) formatted files. Log

 

message fields are separated by commas.

set log setting syslog remote {enable disable}

Enable or disable logging to the remote syslog server.

 

 

set log setting syslog remote server <server_ip>

Configure the remote syslog server log setting.

 

• <server_ip> is the IP address of the remote server.

 

 

set log setting syslog remote server <server_ip>

Configure the port that the remote syslog server uses to receive log

port <port_integer>

messages.

 

• <port_integer> is the port number of the server.

 

The default port is 514.

 

 

100

05-16000-0082-20050115

Fortinet Inc.

Page 100
Image 100
Fortinet FortiLog-800, FortiLog-100, FortiLog-400 manual