Fortinet black logo

CLI Reference

log filter

log filter

Use this command to select log messages in this VDOM for viewing or deletion. You can view one log category on one device at a time. Optionally, you can filter the messages to select only specified date ranges or severities of log messages. For traffic logs, you can filter log messages by source or destination IP address.

Commands are cumulative. If you omit a required variable, the command displays the current setting.

Use as many execute log filter commands as you need to define the log messages that you want to view.

Syntax

execute log filter category  Category.
        {category}   Category name, press enter for options.

execute log filter device  Device to get log from.
        {device}   Device name, press enter for options.

execute log filter dump  Dump current filter settings.

execute log filter field  Filter by field.
        {name}   Field name, press enter for options.
            {argument 1}   Field search argument 1, press enter for more help.
                {argument 2}   <argument 2>
                    {argument 3}   <argument 3>
                        {argument 4}   <argument 4>
                            {argument 5}   <argument 5>
                                {argument 6}   <argument 6>
                                    {argument 7}   <argument 7>

execute log filter ha-member  HA member.
        sn   Serial number of HA member.

execute log filter max-checklines  Maximum number of lines to check.
        number   0 or (100 - 1000000).

execute log filter reset  Reset filter.
        {enter|all|field}   <enter|all> to reset all, <field> to reset field only.

execute log filter show-utm-ref  Whether to show utmref field. This field contains the information to locate UTM logs for the traffic log
        number   0 or 1

execute log filter start-line  Start line to display.
        number   >=1

execute log filter view-lines  Lines per view.
        number   Number of lines to view (5 - 1000).

log filter

Use this command to select log messages in this VDOM for viewing or deletion. You can view one log category on one device at a time. Optionally, you can filter the messages to select only specified date ranges or severities of log messages. For traffic logs, you can filter log messages by source or destination IP address.

Commands are cumulative. If you omit a required variable, the command displays the current setting.

Use as many execute log filter commands as you need to define the log messages that you want to view.

Syntax

execute log filter category  Category.
        {category}   Category name, press enter for options.

execute log filter device  Device to get log from.
        {device}   Device name, press enter for options.

execute log filter dump  Dump current filter settings.

execute log filter field  Filter by field.
        {name}   Field name, press enter for options.
            {argument 1}   Field search argument 1, press enter for more help.
                {argument 2}   <argument 2>
                    {argument 3}   <argument 3>
                        {argument 4}   <argument 4>
                            {argument 5}   <argument 5>
                                {argument 6}   <argument 6>
                                    {argument 7}   <argument 7>

execute log filter ha-member  HA member.
        sn   Serial number of HA member.

execute log filter max-checklines  Maximum number of lines to check.
        number   0 or (100 - 1000000).

execute log filter reset  Reset filter.
        {enter|all|field}   <enter|all> to reset all, <field> to reset field only.

execute log filter show-utm-ref  Whether to show utmref field. This field contains the information to locate UTM logs for the traffic log
        number   0 or 1

execute log filter start-line  Start line to display.
        number   >=1

execute log filter view-lines  Lines per view.
        number   Number of lines to view (5 - 1000).