Config

Managing the FortiLog unit

 

 

Level 1

Mirroring disk volume. Protects data by automatically backing up the

 

contents of one disk onto the second disk of a mirrored pair. Mirroring

 

protects data if one disks fails. Disk capacity is equal to a single hard disk

 

because the second hard disk is used to automatically back up the first.

 

Use Level 1 to protect important personal or corporate data.

Level 5

RAID 5 disk group. Three or more hard disks can be teamed up to form a

 

large-capacity RAID 5 disk group. RAID 5 distributes and stores data

 

among member disks as it is received. At the same time RAID uses an

 

amount of space roughly equivalent to a whole disk to store reference

 

numbers with the same elements. If one of the disks in the group is

 

damaged, you can shut down the computer and install a new disk, and

 

the FortiLog unit can restore the data on the new disk using the reference

 

information.

 

If you have a system with four disks but use only three in your RAID 5

 

group, the fourth serves as a backup disk. If one of the three disks is

 

damaged the FortiLog unit automatically reverts to the fourth disk without

 

powering down.

 

The approximate capacity of a RAID 5 disk group is one hard disk worth

 

of space less than the total rated capacity of the group.

Log settings

To configure the FortiLog unit to log locally or to send FortiLog log messages to a remote syslog server, go to System > Config > Log Settings. You can configure the log level and you can use config policy to record event log messages. See “Log policy” on page 45 for information about the types of logs and how to configure them.

Figure 15: Log settings

Log Locally

Select this option to save the log messages on its own hard disks.

Level

Select the severity for which you want to record log messages locally. The

 

FortiLog unit logs all levels of severity down to, but not lower than, the

 

level you select. For example, if you want to record emergency, critical,

 

and error messages, select Error. “Log policy” on page 45 lists the log

 

message levels.

Config Policy

Select Config policy for which activities you want the FortiLog unit to

 

record log messages.

Log to Host

Select Log to Host to configure the FortiLog unit to send log messages to

 

a remote syslog server.

IP

The IP address of the remote syslog server.

Port

The port that the remote syslog server uses to receive log messages. The

 

default port is 514.

44

05-16000-0082-20050115

Fortinet Inc.

Page 44
Image 44
Fortinet FortiLog-400, FortiLog-100, FortiLog-800 manual Log settings, Config Policy, Log to Host, Port