Fortigate not showing logs. The below window will show up the Analytic.
- Fortigate not showing logs We also can not see the logs in the fortigate configuring the Fo Fortigate not showing any logs in Events >> HA Events. ScopeFortiOS 4. 4 and FortiGate on v5. AntiVirus - Honestly, Only certain FortiGate models support Disk Logging — refer to the FortiView Feature Support – Platform Matrix on page 1149 for more information. To know the status of the logs, execute the below debug: # diagnose debug application miglogd -1 # diagnose debug enable # execute for Hi I'm not sure about what you want to achieve, but consider this . 0 MR3FortiOS 5. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local On a freshly configured FG60D using the free FortiCloud subscription limit of 1GB and running 5. 5, and I had the same problem under 6. Logging is configured to use FortiCloud and the FortiCloud website shows up to date log entries for this firewall as expected, but they cannot be I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. 611 Hi I upgraded the 60F from version 7. Please see the below. 10 and now initiated the rebuild DB I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. Note that the mentioned log is not recorded when the Log location is Disk. This article discusses logs that are not generated in the firewall. Whats happening with the logs??? FortiGate, Syslog. Fortinet Community; Support Forum; Time & Date in log is not correct; Options. The issue is there are no local traffic logs for any traffic source/destination of the fortigate itself. 109 ---> 10. In CLI, type the following command: diagnose log test . FortiGate version 7. 620 Fortigate not showing any logs in Events >> HA Events. With logging ena Make sure forward-traffic logs enabled. Select an upload option: Real-Time: Howdy all, I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. When I use the Packet Capture, I notice some odd behaviour that I do not understand and wanted to know if this is normal or is there a problem. Scope: FortiCloud. I can view the logs stored on local memory and the cloud logs of other firewalls in the security fabric in FortiView still, and the log settings show data Description: This article describes the case when FortiGate does not display logs from FortiAnalyzer at Forward Traffic. Checked the same in FAZ and there also it is not showing any log for HA. log, the type showing Event and Traffic. 0 to 5. FortiGate FW Syslogs Not showing up in Dashboard. Note: If a VPN is used for the communication between FortiAnalyzer and FortiGate, the source IP must be set. Focus on the collector agent log-on list: If some log-on events are missing, there is no communication issue between FortiGate and the collector agent. Make sure that Security Profile (IPS) are enabled in your policies, and the logs are enabled. Replace portX with the FortiGate port that the FortiAP is connected to and capture the CAPWAP management, DHCP, and ARP packets. I am going to open a ticket with Fortinet on this as it is odd for sure. If there is a communication issue there will not be any log on events in the firewall. Some Message was coming saying that SQL is not enable. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local Yes, am able to see the logs in log view >> log browse you should see logs files. The last 7 days is the default time range if the time range filter is not included to prevent querying huge numbers of log entries. Real-time Debug: The following real-time debug commands should be captured simultaneously in separate CLI windows/log files: CLI session #1. Check Logging Settings: Make sure that the logging settings for your policies are configured to include the Policy ID in the logs. If your FortiGate does not support local logging, it is recommended to use FortiCloud. Hi msolanki, Changed to reliable but still not working, and yes I can see the logs on disk/memory. It would generate different type of dummy logs and the GUI tab should now appear. Does anyone have a solution for this? When we checked the dashboard, we can see that the FortiAnalyzer is receiving logs from the FortiGate but it is not Inserting them into the database. On the Cloud Logging tab, set Type to FortiGate Cloud. Yes, am able to see the logs in log view >> log browse you should see logs files. No log would be lost. 109 is the remote gateway . Hi, What I'm simply looking for is to see logs (detailed and meaningful logs) about Fortigate viruses and attacks detected by rules where IPS and AV are enabled in security profile. 0. Investigation: Verify the ADOM Quota utilization by going to System Settings -> Storage Info -> select the ADOM that has the device. log and display then I can able to see the live logs which is today date. Log & Report – User Events is your friend. I've checked the "log violation traffic" on the implicit deny policy in both the GUI and CLI and it is on (which I believe should be the default anyway). If there are no logs, check the following settings and make sure the category in question a root cause for the following symptom : The FortiGate does not log some events on the syslog servers. Phase 1 logs are showing up now as successful. When going to the FortiGate unit under Log&Report -> Forward Traffic -> Add Filter: filter following the IP address with source or A list of the sources of your network traffic is shown, as well as a graph showing their activity during the last five minutes. However, syslogd2 is configured and enabled: This article explains why some expected memory logs may not be seen in FortiGate/FortiWifi running FortiOS 5. Local disk logging is not available in the GUI if the Security Fabric is enabled. The point is that we dont see any logs in "fortiview and log view", but the device is receiving logs. Solution. 10. I noticed recently that the event logs in the FAZ all stopped at around the same time, all the other logs, traffic etc, are fine they are showing upto the minute but Event all stopped a few months ago. Packet Capture on Fortigate Firewall not capturing all packets We have a Fortigate 200D running the 5. There are many instances where the logs do not generate. Packet log of attacks is enabled on FortiWeb but they are not displayed on FortiAnalyzer. 10 and v7. . There are chances that both encrypts and decrypts are 0. The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. 9. The 'local-traffic' option is set to disable due to which local-traffic logs are not showing in FortiGate. I hope everything going fine and I need to wait for completing the rebuilding process. Although no log is generated, the FortiGate's DNS service receives the query and responds as configured. Below are two examples of such scenario: - When FortiGate receives a TCP FIN packet, and there is no session, which this packet can match. Reply [deleted] Hi my FG 60F v. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local Suddenly last week I lost logs from one of our firewalls (200F) in the Fortinet Cloud views. com'. We also can not see the logs in the fortigate configuring the Fo Traffic logs not showing in FortiWeb Dear All, am facing the problem on viewing the traffic logs in Fortiweb which is deployed in Azure. FortiAnalyzer is in Analyzer mode and not Collector mode. Enable the option and verify the logs. Hello everyone, So was able to resolve this issue kinda, I was able to get the logs from FortiGate to show up on the dashboard by installing Rsyslog on the same server as Wazuh and then writing the syslogs to a var/log/. We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local I have two Fortigates that appear to be configured indentically however I see events in the Log & Report - System Events pane for one device but not the other. Trying to check ha history "diagnose sys ha history " but that is also not showing any output. Yeah, my Fortigate refuses to make outbound connection attempts for the custom IPSEC tunnel types, only the wizards (afterwhich I can convert to a custom tunnel). Check the conn-timeout setting as this will impact on the logs from Check in FortiGate users and devices there are some logs on the event missing. Forward traffic is not displayed or the memory log is not displayed on the screen. If passing and there issome issue on FortiGate, run the below commands on FortiGate: get log fortianalyzer setting . This is a brand new unit which has inherited the configuration file of a 60D v. We also can not see the logs in the fortigate configuring the FortiAnalyzer like source. 4. Before you can determine if the logs indicate a problem, you need to know what logs result from normal operation. While the database is rebuilding, new generated logs are postponed to be written to the database so that the newly generated logs are not available immediately on GUI. If there are no logs, check the configuration below: Note: By default, all Event logging is enabled under the Log Event filter configuration. On the FAZ size, when I try to check the logs on FortiView > Traffic nothing show up, but on the Log View > Traffic I can see the log files on the FAZ, apparently the FAZ is not able to performing the "get" operation to display the logs. FortiGate. Whats happening with the logs??? Not showing intrusion prevention in FortiGate under log view in Forti analyzer Suddenly I didn't Intrusion prevention option under FortiGate . x, it can be found under Log & Report -> Log Settings -> Global Settings. Whats happening with the logs??? FortiGate v7. 6. There are several ways to judge if these three daemons every restarted In order for information to appear in the FortiView consoles, disk logging must be selected for the FortiGate unit. Regards, For some cases, it would take a long time to complete database rebuild (depending on how many logs there are existing). Enable "Log Allowed Traffic" and select "All Sessions" on the firewall policy. I enabled the option to Log All Sessions. Navigate to "Policy & Objects" > "IPv4 Policy" (or "IPv6 Policy" if applicable). 5. Check the I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. Forward Traffic Log if you see the user and the icon is blue means that it was authenticated, if it is red it wasn’t. conf log setting set resolve-ip enable end . For now, with logs on memory (via live GUI or console CLI not using any solution like Fortianalyzer). In FortiGate, I have configured "Remote Logging & Archiving" with FAZ Ip address with minimum "debug" level. In the GUI, Log & Report > Log Settings provides the settings for Forward traffic is not displayed or the memory log is not displayed on the screen. Via the CLI - log severity level set to Warning Local logging Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local Yes, am able to see the logs in log view >> log browse you should see logs files. 4 Handbook and tagged fortiview not showing logs , fortiview troubleshooting , troubleshooting your fortiview on August 17, 2016 by Mike . Traffic logs not showing in FortiWeb Dear All, am facing the problem on viewing the traffic logs in Fortiweb which is deployed in Azure. If I select the anyone of the file *****. But there are no logs in the log & Archive Access. Whats happening with the logs??? For some cases, it would take a long time to complete database rebuild (depending on how many logs there are existing). 10 and now initiated the rebuild DB Fortigate not showing any logs in Events >> HA Events. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. FortiAnalyzer on v5. I have two 60Ds and one shows an option of System Events under the Log & Report option. Hi guys, We have a couple of FortiGate 30E firewalls on two different locations. Fortinet TAC also suggested me to select a disk there, but only FortiAnalyzer is visible. Both devices ship their logs via syslog to another device and I can see system events, such as admin login, being generated for both devices I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local Howdy all, I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. If FortiAnalyzer logs are visible but are not downloading on the FortiGate, run the following command: execute log fortianalyzer test-connectivity . 0,build0271. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local Those same entries are not showing in the Voice logs in the log monitor section or any other section in the appliance interface. I tried different browsers but no luck. Logging 27; Virtual IP 27; Web profile 27; FortiConverter 25; FortiGate v5. 2 and higher. Section 2: Verify FortiAnalyzer configuration on the FortiGate. The issue is that I cannot see all the websites that are being visited by users in the Security Log -> Web Filter. 0, also note that when I go to certain policy it doesn't show when I edit the policy ,but strangely when I point my mouse on the security This article describes why in some cases, even when a FortiCloud paid account has 1 year host log retention, only the last 7 days of logs are visible. Log settings can be configured in the GUI and CLI. (fortiview not showing the logs, then initiate the rebuild db) Today I upgraded latest 5. Scope. (fortiview not showing the logs, then initiate the rebuild db) Today I Fortigate not showing any logs in Events >> HA Events. 2 24 Hi All, I have installed a Fortigate 200B Firewall. The Fortinet Security Fabric brings together the concepts of We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. By the way, we also send logs to FortiAnalyzer. FortiCloud not showing any data . 2 onward, FortiGate 7. Scope FortiAnalyzer. Solution Perform a log entry test from the FortiGate CLI using the "diag log test" command. 2 three days ago. Application Control - Logging has to be enabled similar to Web Filter. However, memory/disk logs can be fetched and displayed from GUI. conf. Its stuck like loading the information. We also can not see the logs in the fortigate configuring the Fo FortiGate will not list all log-type options under “Logs and Report” to keep GUI simple when some features are not activated. Miglogd daemon is responsible for logging in to FortiGate. Web filter - you have to set to Monitor (NOT ALLOW) for it to log. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local FortiGate 7. Hi , Only FortiAnalyzer is visible in the top right corner. Enable Disk, Local Reports, and Historical FortiView. However, the URLs IP addresses do appear in the traffic log -> Forward Hello, We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. 100. I've checked the logs in the GUI and CLI. The Local Traffic Log is always empty and this specific traffic is absent from the forwarding logs (obviously). To enable the name resolution of the traffic logs from GUI, go to Log & Report -> Log settings and toggle the Resolve Hostnames option. Hi All, I have installed a Fortigate 200B Firewall. Labels: Labels: It seems like the logs for Security Event (IPS) are not present in FGT itself. This article explains how to list that log-type options and generate logs, under the “Logs and Report” when it is required. set forward-traffic enable. 14 and was then updated following the suggested upgrade Different browsers: Yes, no joy. Fortigate not showing any logs in Events >> HA Events. Solution: In some particular cases, it is possible to not see only forward traffic logs in the FortiCloud account. How can you solve this issue?แนะนำวิธีการแก้ปัญหาเมื่อพบ Fortigate not showing any logs in Events >> HA Events. 7. Please guide. Select the policy for which you want to see the Policy ID in the logs. Right-click on any of the sources listed and select Drill Down to Details. I tried to rebuild the DB after restoring the logs. Sometimes logs fail to be displayed are caused by log related daemons instability such as coredump. 7, v7. When a feature is enabled in FortiWeb' GUI Log&Report > Log Config > Other Log Settings > Retain Packet Payload For, the attack packet’s payload that buffered and parsed by HTTP parser will be displayed in attack logs and sent to FortiAnalyzer. <3>[97484. Fortinet TAC also suggested me to select a disk there, but only FortiAnalyzer is I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. This entry was posted in FortiOS 5. Solution Not showing intrusion prevention in FortiGate under log view in Forti analyzer Suddenly I didn't Intrusion prevention option under FortiGate . Plus, other firewalls in the security fabric have their logs showing up fine in here, just not this one. Scope . Firmware is 6. You should log as much information as possible when you first configure FortiOS. Its stuck like loading the information . We have tried Debug, Informational, Warning (all options) and set the log to remote host by enabling and selecting everything in the list. If FortiGate is sending a log to FortiAnalyzer successfully, check for any abnormal logs on the FortiAnalyzer TAC report. 0SolutionA possible root cause is that the logging options for the syslog server may not be all enabled. - firewall policies are for traffic passing through FortiGate unit and if logged than records will be in Forward Traffic log. DNS Query - the Fortigate has to be a DNS server and logging has to be enabled. Go to Security Fabric -> Fabric Connectors and select the Logging & Analytics card -> Edit. The following FortiGate Log settings are used to send logs to the FortiAnalyzer: get log fortianalyzer setting Define local log storage on the FortiGate: Enable: Logs will be stored on a local disk. Although disk logging is enabled, I cannot see the disk in that section. 603631] Out of memory: Kill process 21679 (sqllogd) score 93 or sacrifice child My 40F is not logging denied traffic. They are also not showing up in the syslog feed that is set up. I took help & enable SQL through CLI. Refresh the GUI and check whether the web filter logs are visible. Solution: When FortiGate has a DNS service enabled on an interface, and clients access the DNS server using a Virtual IP on the FortiGate, no DNS query log is generated. or if the logs stop showing and you see the crash again, I would suggest For some cases, it would take a long time to complete database rebuild (depending on how many logs there are existing). In the following example, syslogd was not configured and not enabled. To do this: Log in to your FortiGate firewall's web interface. Please ensure your nomination includes a solution within the reply. This article describes how to resolve an issue where the forward traffic log is not showing any data even though logging is turned on in the FortiGate. Solution: FortiGate allows up to 4 Syslog servers configuration: If the Syslog server is configured under syslogd2, syslogd3, or syslogd4 settings, the respective would not be shown in GUI. A log message records the traffic passing through FortiGate to your network and the action FortiGate takes when it scans the traffic. 8, v7. Fortinet TAC also suggested me to select a disk there, but only FortiAnalyzer is Hi msolanki, Changed to reliable but still not working, and yes I can see the logs on disk/memory. If not then: set forward-traffic enable. Does anyone have a solution for this? FortiGate 7. The same for FortiCloud: config log fortiguard filter. Whats happening with the logs??? We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. Starting from v7. The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network Hello, We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. Now the message is coming saying Log Location: Disk But no logs are showing. 3 all my Traffic, Event and System Logs show as empty. Via the CLI - log severity level set to Warning Local logging . The below window will show up the Analytic The Forums are a place to find answers on a range of Fortinet products from peers and product experts. From firmware 5. It is difficult to troubleshoot logs without a baseline. diagnose debug console timestamp enable however, due to some reason the FortiGate is not sending the traffic out to its LAN or the traffic is not received from LAN. end . Those same entries are not showing in the Voice logs in the log monitor section or any other section in the appliance interface. This must be configured from the Fortigate CLI, with the follo Am able to see the logs under Log view -> Log Browse -> list of logs ***. Problem is ,in log the time is not appearing properly. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local Showing the SSL VPN portal login page in the browser's language If FortiGate logs are too large, you can turn off or scale back the logging for features that are not in use. Absolutely nothing for the Phase2 negotiation though. resolve This article describes when forward traffic logs are not displayed when logging is enabled in the policy. FortiGates with VDOMs enabled, the perf-stats are The point is that we dont see any logs in "fortiview and log view", but the device is receiving logs. Nihas [\b] The IPS log tab in GUI will not appear if there are no IPS logs. Log traffic must be enabled in firewall policies: Check the log settings and select from the following: resolve-ip Add resolved domain name into traffic log if possible. 14 is not sending any syslog at all to the configured server. No entries found is showing. What am I missing to get logs for traffic with destination of the device Go to Log and Report -> Events and from the top right corner, select the Events category from the drop-down menu. FortiGate 7. I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. 2) These log messages are also known to be seen, when a packet comes to a FortiGate and FortiOS and can't find an existing session for it, although it is expected that it has to be in place. Hello, Securtiy Events Summary logs do not appear on FortiGate. Hello everybody, We are facing an issue where the Application control isn't showing in the security profile in our FortiGate firewall we are using 60f we noticed this problem since we updated the firewall to the latest version 7. In this case, first, it I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. execute ping logctrl1 I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. Am able to see the logs under Log view -> Log Browse -> list of logs ***. 0 firmware. If FortiGate logs are too large, you can turn off or scale back the logging for features that are not in use. 9 security events summary logs not showing Hello, Securtiy Events Summary logs do not appear on FortiGate. 0 found 0 returned Reach FortiCloud: Testing connection to FortiCloud is successful, I already tried increasing the timeout as well. SolutionBy default from 5. Via the CLI - log severity level set to Warning Local logging Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local-traffic enable I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. Make sure this setting is applied: conf log gui-display get set resolve If the sys-perf-log-interval value has already been set but System performance statistics logs still cannot be seen under System Events, make sure that the Log location set is any of the following: Memory, FortiAnalyzer, or FortiGate Cloud. nits sending logs to a FAZ 200. fortinet. This article describes when only local traffic is not showing in FortiCloud. If this output on the FortiAnalyzer TAC report is found/observed, this shows that the FortiAnalyzer is constantly out of memory. 2 onward the default severity for memory logging is set to warning to reduce the amount of logs written to memory by default. In some scenarios, it is possible to see the logs at the FortiAnalyzer unit under Log View -> FortiGate -> Traffic. I have got a Fortigate 100D appliance with v5. FortiCloud. config log fortiguard setting We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. Hello, We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. Then added the following to the ossec. The other does not have this option. Both are on FortiOS 5. Via the CLI - log severity level set to Warning Local logging Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. 9, v7. 5 to 7. Check internet connectivity and confirm it resolves hostname 'logctrl1. 6 will not work. While the database is rebuilding, new generated logs are postponed to be written to the database so FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic. Once I got all this to work I enabled IPS, DLP, AV, Web-Filter, CASI. Recently we upgraded Fortianalyzer-1000D from version 5. This is expected behavior. If not: Restart the logging process. The logs are all saved in log files. Whats happening with the logs??? FortiGate 7. diagnose vpn ike log-filter dst-addr4 10. /sigh. CLI: No. Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network Solved: Hello, Securtiy Events Summary logs do not appear on FortiGate. Whats happening with the logs??? Suddenly last week I lost logs from one of our firewalls (200F) in the Fortinet Cloud views. Make sure you display logs from the correct location(GUI): This article describes how to investigate if WAF is not generating logs for blocked traffic. How do I turn on this option? I have been using the System Events to identify IPs trying to attack the 60D. config log fortiguard setting get. Fortinet TAC also suggested me to select a disk there, but only FortiAnalyzer is Not showing intrusion prevention in FortiGate under log view in Forti analyzer Suddenly I didn't Intrusion prevention option under FortiGate . 2. Does anyone have a solution for this? Although disk logging is enabled, I cannot see the disk in that section. When the Security Fabric is enabled, disk logging can still be configured on the root FortiGate in the CLI but is not available for downstream FortiGates. Fortinet TAC also suggested me to select a disk there, but only FortiAnalyzer is For some cases, it would take a long time to complete database rebuild (depending on how many logs there are existing). By default, creating a new web application firewall using the GUI will create a new WAF profile with LOG Nominate a Forum Post for Knowledge Article Creation. The system looks very promising but has a problem with a new feature in Log & Report. Enable Disk , Local Reports , and Historical Log settings determine what information is recorded in logs, where the logs are stored, and how often storage occurs. I think, because of this issue, FAZ is unable to show the This article describes the first workaround steps in case of unable to retrieve the Forward traffic logs or Event logs from the FortiCloud. On checking FortiGate's FortiGuard log and filter setting, all the necessary options are set to enable. Please help to fix this issue? Nihas [\b] Solved! Go to Solution. Fortinet TAC also suggested me to select a disk there, but only FortiAnalyzer is We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. how to resolve the loss of historical logs on Fortianalyzer due to ADOM Quota over limit. 8. The "Summary" page in "System Events" and "Security Events" is Event Logs not showing I have 10 FGT u. Both are having trouble uploading data to FortiCloud for analyzing. I can view the logs stored on local memory and the cloud logs of other firewalls in the security fabric in FortiView still, and the log settings show data Checking the logs. Solution Firewall memory logging severity is set to warning to reduce the Web filter - you have to set to Monitor (NOT ALLOW) for it to log. I am able to see all event logs in FAZ, but unable to see Trffic logs. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local Hi msolanki, Changed to reliable but still not working, and yes I can see the logs on disk/memory. 15 build1378 (GA) and they are not showing up. Disk logging is Local logging is not supported on all FortiGate models. Whats happening with the logs??? Forward logging is setup and works fine for my needs. To select disk logging, go to Lo g & Report > Log Settings . Once all that was working I enabled SSL/SSH Inspection. After upgrading, logs are not showing in Fortiview even rebuild the SQL database. Both device are showing status Synchronized in HA section. Sample Configuration:. - Local Traffic log contains logs of traffic originate from Enable logging to FortiCloud. Whats happening with the logs??? Fortigate not showing any logs in Events >> HA Events. The logs are still present in Log Browse (Compressed). yftut ekykb hoamzs otl rirfe nezw dmxxb betwl otvygn dwe wxmldh cngro okct uhog yawjas