log {fortianalyzer | fortianalyzer2 | fortianalyzer3 | fortianalyzer-cloud} setting
Use this command to connect and configure logging to up to three FortiAnalyzer log management devices.
The exact same entries can be found under the fortianalyzer , fortianalyzer2 , fortianalyzer3 , and fortianalyzer-cloud settings commands. |
History
The following table shows all newly added, changed, or removed entries as of FortiOS 6.0.2.
Command | Description |
---|---|
set ssl-min-proto-version {default | SSLv3 | TLSv1 | TLSv1-1 | TLSv1-2} |
Set the minimum SSL version that can be used for SSL/TLS-protected FortiAnalyzer sessions. The default value is |
config log fortianalyzer setting set faz-type {integer} Hidden setting index of FortiAnalyzer. range[0-4294967295] set status {enable | disable} Enable/disable logging to FortiAnalyzer. set ips-archive {enable | disable} Enable/disable IPS packet archive logging. set server {string} The remote FortiAnalyzer. size[63]. This command is not available for FortiAnalyzer Cloud. set hmac-algorithm {sha256 | sha1} FortiAnalyzer IPsec tunnel HMAC algorithm. sha256 Use SHA256 as HMAC algorithm. sha1 Step down to SHA1 as the HMAC algorithm. set enc-algorithm {high-medium | high | low} Enable/disable sending FortiAnalyzer log data with SSL encryption. high-medium Encrypt logs using high and medium encryption algorithms. high Encrypt logs using high encryption algorithms. low Encrypt logs using all encryption algorithms. set ssl-min-proto-version {option} Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). default Follow system global setting. SSLv3 SSLv3. TLSv1 TLSv1. TLSv1-1 TLSv1.1. TLSv1-2 TLSv1.2. set conn-timeout {integer} FortiAnalyzer connection time-out in seconds (for status and log buffer). range[1-3600] set monitor-keepalive-period {integer} Time between OFTP keepalives in seconds (for status and log buffer). range[1-120] set monitor-failure-retry-period {integer} Time between FortiAnalyzer connection retries in seconds (for status and log buffer). range[1-86400] set mgmt-name {string} Hidden management name of FortiAnalyzer. size[35] set certificate {string} Certificate used to communicate with FortiAnalyzer. size[35] - datasource(s): certificate.local.name set source-ip {string} Source IPv4 or IPv6 address used to communicate with FortiAnalyzer. size[63] set __change_ip {integer} Hidden attribute. range[0-255] set upload-option {store-and-upload | realtime | 1-minute | 5-minute} Enable/disable logging to hard disk and then uploading to FortiAnalyzer. store-and-upload Log to hard disk and then upload to FortiAnalyzer. realtime Log directly to FortiAnalyzer in real time. 1-minute Log directly to FortiAnalyzer at most every 1 minute. 5-minute Log directly to FortiAnalyzer at most every 5 minutes. set upload-interval {daily | weekly | monthly} Frequency to upload log files to FortiAnalyzer. daily Upload log files to FortiAnalyzer once a day. weekly Upload log files to FortiAnalyzer once a week. monthly Upload log files to FortiAnalyzer once a month. set upload-day {string} Day of week (month) to upload logs. set upload-time {string} Time to upload logs (hh:mm). set reliable {enable | disable} Enable/disable reliable logging to FortiAnalyzer. This command is not available for FortiAnalyzer Cloud. end
Additional information
The following section is for those options that require additional explanation.
ssl-min-proto-version {default | SSLv3 | TLSv1 | TLSv1-1 | TLSv1-2}
Set the minimum SSL version that can be used for SSL/TLS-protected FortiAnalyzer sessions.
The default value is default
which means to follow the global minimum set by the ssl-min-proto-version
option of the config system global
command.