Fortinet FortiLog-400, FortiLog-100, FortiLog-800 Log settings, Config Policy, Log to Host, Port

Config	Managing the FortiLog unit
Level 1	Mirroring disk volume. Protects data by automatically backing up the
	contents of one disk onto the second disk of a mirrored pair. Mirroring
	protects data if one disks fails. Disk capacity is equal to a single hard disk
	because the second hard disk is used to automatically back up the first.
	Use Level 1 to protect important personal or corporate data.
Level 5	RAID 5 disk group. Three or more hard disks can be teamed up to form a
	large-capacity RAID 5 disk group. RAID 5 distributes and stores data
	among member disks as it is received. At the same time RAID uses an
	amount of space roughly equivalent to a whole disk to store reference
	numbers with the same elements. If one of the disks in the group is
	damaged, you can shut down the computer and install a new disk, and
	the FortiLog unit can restore the data on the new disk using the reference
	information.
	If you have a system with four disks but use only three in your RAID 5
	group, the fourth serves as a backup disk. If one of the three disks is
	damaged the FortiLog unit automatically reverts to the fourth disk without
	powering down.
	The approximate capacity of a RAID 5 disk group is one hard disk worth
	of space less than the total rated capacity of the group.

Log settings

To configure the FortiLog unit to log locally or to send FortiLog log messages to a remote syslog server, go to System > Config > Log Settings. You can configure the log level and you can use config policy to record event log messages. See “Log policy” on page 45 for information about the types of logs and how to configure them.

Figure 15: Log settings

Log Locally	Select this option to save the log messages on its own hard disks.
Level	Select the severity for which you want to record log messages locally. The
	FortiLog unit logs all levels of severity down to, but not lower than, the
	level you select. For example, if you want to record emergency, critical,
	and error messages, select Error. “Log policy” on page 45 lists the log
	message levels.
Config Policy	Select Config policy for which activities you want the FortiLog unit to
	record log messages.
Log to Host	Select Log to Host to configure the FortiLog unit to send log messages to
	a remote syslog server.
IP	The IP address of the remote syslog server.
Port	The port that the remote syslog server uses to receive log messages. The
	default port is 514.

44 05-16000-0082-20050115 Fortinet Inc.