Fortinet black logo

CLI Reference

log eventfilter

log eventfilter

Use log eventfilter to select which Event log messages will be recorded.

Note: event must be enabled for any of the other options to appear. Disabling it overrides all other enabled log types in this category.

config log eventfilter
    set event {enable | disable}   Enable/disable event logging.
    set system {enable | disable}   Enable/disable system event logging.
    set vpn {enable | disable}   Enable/disable VPN event logging.
    set user {enable | disable}   Enable/disable user authentication event logging.
    set router {enable | disable}   Enable/disable router event logging.
    set wireless-activity {enable | disable}   Enable/disable wireless event logging.
    set wan-opt {enable | disable}   Enable/disable WAN optimization event logging.
    set endpoint {enable | disable}   Enable/disable endpoint event logging.
    set ha {enable | disable}   Enable/disable ha event logging.
    set compliance-check {enable | disable}   Enable/disable PCI DSS compliance check logging.
    set security-rating {enable | disable}   Enable/disable Security Rating result logging.
end

Additional information

The following section is for those options that require additional explanation.

event {enable | disable}

Enable or disable logging of all Event logs, which track various FortiGate system and function events.

system {enable | disable}

Enable or disable logging of system activity messages, HA activity messages, CPU & memory usage, VIP realserver health monitoring, and AMC interface bypass mode messages.

vpn {enable | disable}

Enable or disable logging of VPN messages, IPSec negotiation messages, SSL user authentication, administration and session messages.

user {enable | disable}

Enable or disable logging of user authentication events.

router {enable | disable}

Enable or disable logging of router activity and state change events.

wireless-activity {enable | disable}

Enable or disable logging of wireless activity and state change events.

wan-opt {enable | disable}

Enable or disable logging of WAN Optimization activity and state change events.

endpoint {enable | disable}

Enable or disable logging of Endpoint Control activity and state change events.

ha {enable | disable}

Enable or disable logging of all HA activity and state change events.

compliance-check {enable | disable}

Enable or disable logging of all Compliance-related system events.

log eventfilter

Use log eventfilter to select which Event log messages will be recorded.

Note: event must be enabled for any of the other options to appear. Disabling it overrides all other enabled log types in this category.

config log eventfilter
    set event {enable | disable}   Enable/disable event logging.
    set system {enable | disable}   Enable/disable system event logging.
    set vpn {enable | disable}   Enable/disable VPN event logging.
    set user {enable | disable}   Enable/disable user authentication event logging.
    set router {enable | disable}   Enable/disable router event logging.
    set wireless-activity {enable | disable}   Enable/disable wireless event logging.
    set wan-opt {enable | disable}   Enable/disable WAN optimization event logging.
    set endpoint {enable | disable}   Enable/disable endpoint event logging.
    set ha {enable | disable}   Enable/disable ha event logging.
    set compliance-check {enable | disable}   Enable/disable PCI DSS compliance check logging.
    set security-rating {enable | disable}   Enable/disable Security Rating result logging.
end

Additional information

The following section is for those options that require additional explanation.

event {enable | disable}

Enable or disable logging of all Event logs, which track various FortiGate system and function events.

system {enable | disable}

Enable or disable logging of system activity messages, HA activity messages, CPU & memory usage, VIP realserver health monitoring, and AMC interface bypass mode messages.

vpn {enable | disable}

Enable or disable logging of VPN messages, IPSec negotiation messages, SSL user authentication, administration and session messages.

user {enable | disable}

Enable or disable logging of user authentication events.

router {enable | disable}

Enable or disable logging of router activity and state change events.

wireless-activity {enable | disable}

Enable or disable logging of wireless activity and state change events.

wan-opt {enable | disable}

Enable or disable logging of WAN Optimization activity and state change events.

endpoint {enable | disable}

Enable or disable logging of Endpoint Control activity and state change events.

ha {enable | disable}

Enable or disable logging of all HA activity and state change events.

compliance-check {enable | disable}

Enable or disable logging of all Compliance-related system events.