Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    Home FortiAnalyzer 7.0.4 CLI Reference
    7.0.4
    7.6.1
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.0.12
    6.0.11
    6.0.10
    6.0.9
    6.0.8
    6.0.7
    6.0.6
    6.0.5
    6.0.4
    6.0.3
    6.0.2
    6.0.1
    6.0.0
    5.6.11
    5.6.10
    5.6.9
    5.6.8
    5.6.8
    5.6.7
    5.6.7
    5.6.6
    5.6.6
    5.6.5
    5.6.5
    5.6.4
    5.6.4
    5.6.3
    5.6.3
    5.6.2
    5.6.2
    5.6.1
    5.6.1
    5.6.0
    5.6.0
    5.4.7
    5.4.6
    5.4.5
    5.4.5
    5.4.4
    5.4.4
    5.4.3
    5.4.3
    5.4.2
    5.4.2
    5.4.1
    5.4.1
    5.4.0
    5.4.0
    5.2.10
    5.2.9
    5.2.9
    5.2.7
    5.2.7
    5.2.6
    5.2.6
    5.2.5
    5.2.5
    5.2.4
    5.2.4
    5.2.3
    5.2.3
    5.2.2
    5.2.1
    5.2.0
    5.0.13
    5.0.13
    5.0.11
    5.0.11
    5.0.10
    5.0.9
    5.0.8
    5.0.7
    5.0.6
    5.0.5
    5.0.4
    5.0.3
    5.0.2
    5.0.1
    4.3.0
    4.2.0
    4.1.0
    4.0.0

    restore

    restore

    Use this command to:

    • restore the configuration or database from a file
    • change the FortiAnalyzer unit image
    • Restore device logs, DLP archives, and reports from specified servers.

    This command will disconnect all sessions and restart the FortiAnalyzer unit.

    Syntax

    execute restore all-settings {ftp | sftp} <ip:port> <filename> <username> <password> [<crptpasswd>] [option1+option2+...]

    execute restore all-settings scp <ip> <filename> <username> <ssh-cert> [<crptpasswd>] [option1+option2+...]

    execute restore image {ftp | scp | sftp} <filepath> <ip:port> <username> <password>

    execute restore image tftp <string> <ip>

    execute restore logs <device name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]

    execute restore logs-only <device name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]

    execute restore reports <report name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]

    execute restore reports-config {<adom_name> | all]} {ftp | scp | sftp} <ip> <username> <password> <directory> [full]

    Variable Description

    all-settings

    Restore all FortiAnalyzersettings from a file on a FTP, SFTP, or SCP server. The new settings replace the existing settings, including administrator accounts and passwords.

    image

    Upload a firmware image from a(an) FTP/SCP/SFTP/TFTP server to the FortiAnalyzer unit. The FortiAnalyzer unit reboots, loading the new firmware.

    logs

    Restore device logs and DLP archives from a specified server.

    logs-only

    Restore device logs from a specified server.

    reports

    Restore reports from a specified server.

    reports-config

    Restore report configurations to a specified server.

    ftp

    Restore from an FTP server.

    sftp

    Restore from a SFTP server.

    scp

    Restore from an SCP server.

    <ip:port>

    Enter the IP address of the server to get the file from and optionally , for FTP servers, the port number.

    <ip>

    Enter the server IP address.

    <device names>

    Device name or names, separated by commas, or all for all devices. Example: FWF40C3911000061

    <report name(s)>

    Restore specific reports (separated by commas), all for all reports, or reports with names containing given pattern.

    A '?' matches any single character.

    A '*' matches any string, including the empty string, e.g.:

    • foo: for exact match
    • *foo: for report names ending with foo
    • foo*: for report names starting with foo
    • *foo*: for report names containing foo substring.

    {<adom_name> | all]}

    Select to backup a specific ADOM or all ADOMs.

    <filename>

    Enter the file to get from the server. You can enter a path with the filename, if required.

    <filepath>

    Enter the file path on the FTP server.

    <username>

    The username to log on to the server. This option is not available for restore operations from TFTP servers.

    <password>

    Enter the password, or - if there is no password.

    <ssh-cert>

    Enter the SSH certificate used for user authentication on the SCP server.

    [<crptpasswd>]

    Optional password to protect backup content. Use any for no password.

    [option1+option2+...]

    Enter keepbasic to retain IP and routing information on the original unit.

    <directory>

    Enter the directory.

    [full]

    Reports configuration full restoration.

    Example

    This example shows how to upload a configuration file from a FTP server to the FortiAnalyzer unit. The name of the configuration file on the FTP server is backupconfig. The IP address of the FTP server is 192.168.1.23. The user is admin with a password of mypasword. The configuration file is located in the /usr/local/backups/ directory on the FTP server.

    execute restore all-settings ftp 192.168.1.23 /usr/local/backups/backupconfig admin mypasword

    Previous
    Next

    restore

    restore

    Use this command to:

    • restore the configuration or database from a file
    • change the FortiAnalyzer unit image
    • Restore device logs, DLP archives, and reports from specified servers.

    This command will disconnect all sessions and restart the FortiAnalyzer unit.

    Syntax

    execute restore all-settings {ftp | sftp} <ip:port> <filename> <username> <password> [<crptpasswd>] [option1+option2+...]

    execute restore all-settings scp <ip> <filename> <username> <ssh-cert> [<crptpasswd>] [option1+option2+...]

    execute restore image {ftp | scp | sftp} <filepath> <ip:port> <username> <password>

    execute restore image tftp <string> <ip>

    execute restore logs <device name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]

    execute restore logs-only <device name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]

    execute restore reports <report name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]

    execute restore reports-config {<adom_name> | all]} {ftp | scp | sftp} <ip> <username> <password> <directory> [full]

    Variable Description

    all-settings

    Restore all FortiAnalyzersettings from a file on a FTP, SFTP, or SCP server. The new settings replace the existing settings, including administrator accounts and passwords.

    image

    Upload a firmware image from a(an) FTP/SCP/SFTP/TFTP server to the FortiAnalyzer unit. The FortiAnalyzer unit reboots, loading the new firmware.

    logs

    Restore device logs and DLP archives from a specified server.

    logs-only

    Restore device logs from a specified server.

    reports

    Restore reports from a specified server.

    reports-config

    Restore report configurations to a specified server.

    ftp

    Restore from an FTP server.

    sftp

    Restore from a SFTP server.

    scp

    Restore from an SCP server.

    <ip:port>

    Enter the IP address of the server to get the file from and optionally , for FTP servers, the port number.

    <ip>

    Enter the server IP address.

    <device names>

    Device name or names, separated by commas, or all for all devices. Example: FWF40C3911000061

    <report name(s)>

    Restore specific reports (separated by commas), all for all reports, or reports with names containing given pattern.

    A '?' matches any single character.

    A '*' matches any string, including the empty string, e.g.:

    • foo: for exact match
    • *foo: for report names ending with foo
    • foo*: for report names starting with foo
    • *foo*: for report names containing foo substring.

    {<adom_name> | all]}

    Select to backup a specific ADOM or all ADOMs.

    <filename>

    Enter the file to get from the server. You can enter a path with the filename, if required.

    <filepath>

    Enter the file path on the FTP server.

    <username>

    The username to log on to the server. This option is not available for restore operations from TFTP servers.

    <password>

    Enter the password, or - if there is no password.

    <ssh-cert>

    Enter the SSH certificate used for user authentication on the SCP server.

    [<crptpasswd>]

    Optional password to protect backup content. Use any for no password.

    [option1+option2+...]

    Enter keepbasic to retain IP and routing information on the original unit.

    <directory>

    Enter the directory.

    [full]

    Reports configuration full restoration.

    Example

    This example shows how to upload a configuration file from a FTP server to the FortiAnalyzer unit. The name of the configuration file on the FTP server is backupconfig. The IP address of the FTP server is 192.168.1.23. The user is admin with a password of mypasword. The configuration file is located in the /usr/local/backups/ directory on the FTP server.

    execute restore all-settings ftp 192.168.1.23 /usr/local/backups/backupconfig admin mypasword

    Previous
    Next