DOCUMENT LIBRARY

FortiGate / FortiOS

FortiManager

FortiAnalyzer

CLI Reference

Introduction
- FortiAnalyzer documentation
What’s New in FortiAnalyzer 7.6
Using the Command Line Interface
Administrative Domains
- About ADOMs
- Configuring ADOMs
system
fmupdate
execute
diagnose
- auto-delete
- cdb
- debug
  - debug apache
  - debug application
  - debug backup-oldformat-script-logs
  - debug cdbchk
  - debug cli
  - debug console
  - debug coredump
  - debug crashlog
  - debug disable
  - debug enable
  - debug filter
  - debug gui
  - debug info
  - debug klog
  - debug raw-elog
  - debug reset
  - debug service
  - debug sysinfo
  - debug sysinfo-log
  - debug sysinfo-log-backup
  - debug sysinfo-log-list
  - debug timestamp
  - debug vmd
  - debug vminfo
- dlp-archives
- dvm
  - dvm adom
  - dvm capability
  - dvm chassis
  - dvm check-integrity
  - dvm csf
  - dvm dbstatus
  - dvm debug
  - dvm device
  - dvm device-tree-update
  - dvm extender
  - dvm fap
  - dvm fsw
  - dvm group
  - dvm lockinfo
  - dvm proc
  - dvm psirt
  - dvm remove
  - dvm supported-platforms
  - dvm task
  - dvm taskline
  - dvm template
  - dvm transaction-flag
  - dvm workflow
- faz-cdb
- fdsm
- fgfm
- fmnetwork
  - fmnetwork arp
  - fmnetwork interface
  - fmnetwork netstat
- fmupdate
- fortilogd
- fortitoken-cloud
- fwmanager
- ha
- hardware
- incident
- license
- log
- pm2
- report
- rtm
- siem
- sniffer
- sql
- svctools
- system
- test
  - test application
  - test connection
  - test policy-check
  - test search
  - test sftp
- upload
  - upload clear
  - upload status
- vpn
get
show
Appendix A - Object Tables
Appendix B - CLI Error Codes

Home FortiAnalyzer 7.6.6 CLI Reference

7.6.6

log-forward-service

Use the following commands to configure log aggregation service.

This command is only available on FortiAnalyzer models 1000E and above. It is also available on all supported FortiAnalyzer-VM.

For a list of supported models in v7.6.6, see the FortiAnalyzer 7.6.6 Release Notes.

Syntax

config system log-forward-service

set accept-aggregation {enable | disable}

set aggregation-disk-quota <integer>

set collector-auth {enable | disable}

end

Variable	Description
accept-aggregation {enable \| disable}	Enable/disable accept log aggregation option (default = disable).
aggregation-disk-quota <integer>	Aggregated device disk quota on the server, in megabytes (default = 2000).
collector-auth {enable \| disable}	Enable/disable FortiAnalyzer Collectors to be authenticated before forwarding data (default = disable). When enabled, the Collector must be authorized by an admin in the FortiAnalyzer that is operating in Analyzer mode. The device can be authorized in the FortiAnalyzer GUI Device Manager.

Variable

Description

accept-aggregation {enable | disable}

Enable/disable accept log aggregation option (default = disable).

aggregation-disk-quota <integer>

Aggregated device disk quota on the server, in megabytes (default = 2000).

collector-auth {enable | disable}

Enable/disable FortiAnalyzer Collectors to be authenticated before forwarding data (default = disable).

When enabled, the Collector must be authorized by an admin in the FortiAnalyzer that is operating in Analyzer mode. The device can be authorized in the FortiAnalyzer GUI Device Manager.