Fortinet black logo

Administration Guide

Log Servers

Copy Link
Copy Doc ID 5e5f427d-b811-11eb-92d0-00505692583a:594293
Download PDF

Log Servers

You can send FortiDeceptor logs to a remote syslog server, FortiAnalyzer, or common event type (CEF) server. In Log > Log Servers, you can create new remote log servers, and edit and delete remote log servers. You can configure up to 30 remote log server entries.

The following options are available:

Create New

Create a log server entry.

Edit

Edit the selected log server entry.

Delete

Delete the selected log server entry.

This page displays the following information:

Name

Name of the server entry.

Server Type

Server type: syslog or CEF.

Server Address

Log server address.

Port

Log server port number.

Status

Log server status, Enabled or Disabled.

To create a server entry:
  1. Go to Log > Log Servers.
  2. Click Create New.
  3. Configure the following settings:

    Name

    Name of the new server entry.

    Type

    Select Syslog Protocol, FortiAnalyzer, or Common Event Format.

    Log Server Address

    Log server IP address or FQDN.

    Port

    Port number. The default port is 514.

    Status

    Enable or disable sending logs to the server.

    Log Level

    Select the logging levels to forward to the log server. For logging levels, see Logging Levels.

  4. Click OK.
To edit or delete a log server
  1. Go to Log > Log Servers.
  2. Select an entry and click Edit or Delete.

Log Servers

You can send FortiDeceptor logs to a remote syslog server, FortiAnalyzer, or common event type (CEF) server. In Log > Log Servers, you can create new remote log servers, and edit and delete remote log servers. You can configure up to 30 remote log server entries.

The following options are available:

Create New

Create a log server entry.

Edit

Edit the selected log server entry.

Delete

Delete the selected log server entry.

This page displays the following information:

Name

Name of the server entry.

Server Type

Server type: syslog or CEF.

Server Address

Log server address.

Port

Log server port number.

Status

Log server status, Enabled or Disabled.

To create a server entry:
  1. Go to Log > Log Servers.
  2. Click Create New.
  3. Configure the following settings:

    Name

    Name of the new server entry.

    Type

    Select Syslog Protocol, FortiAnalyzer, or Common Event Format.

    Log Server Address

    Log server IP address or FQDN.

    Port

    Port number. The default port is 514.

    Status

    Enable or disable sending logs to the server.

    Log Level

    Select the logging levels to forward to the log server. For logging levels, see Logging Levels.

  4. Click OK.
To edit or delete a log server
  1. Go to Log > Log Servers.
  2. Select an entry and click Edit or Delete.