Fortinet black logo

CLI Reference

config log disk filter

config log disk filter

Configure filters for local disk logging. Use these filters to determine the log messages to record according to severity and type.

config log disk filter
    Description: Configure filters for local disk logging. Use these filters to determine the log messages to record according to severity and type.
    set admin [enable|disable]
    set anomaly [enable|disable]
    set auth [enable|disable]
    set chassis-loadbalance-ha [enable|disable]
    set cpu-memory-usage [enable|disable]
    set dhcp [enable|disable]
    set dlp-archive [enable|disable]
    set event [enable|disable]
    set filter {string}
    set filter-type [include|exclude]
    set forward-traffic [enable|disable]
    set gtp [enable|disable]
    set ha [enable|disable]
    set ipsec [enable|disable]
    set ldb-monitor [enable|disable]
    set local-traffic [enable|disable]
    set multicast-traffic [enable|disable]
    set pattern [enable|disable]
    set ppp [enable|disable]
    set radius [enable|disable]
    set severity [emergency|alert|...]
    set sniffer-traffic [enable|disable]
    set sslvpn-log-adm [enable|disable]
    set sslvpn-log-auth [enable|disable]
    set sslvpn-log-session [enable|disable]
    set system [enable|disable]
    set vip-ssl [enable|disable]
    set voip [enable|disable]
    set wan-opt [enable|disable]
    set wireless-activity [enable|disable]
end

config log disk filter

Parameter

Description

Type

Size

admin

Enable/disable admin login/logout logging.

option

-

Option

Description

enable

Enable admin login/logout logging.

disable

Disable admin login/logout logging.

anomaly

Enable/disable anomaly logging.

option

-

Option

Description

enable

Enable anomaly logging.

disable

Disable anomaly logging.

auth

Enable/disable firewall authentication logging.

option

-

Option

Description

enable

Enable firewall authentication logging.

disable

Disable firewall authentication logging.

chassis-loadbalance-ha *

Enable/disable chassis load balancer state changes logging.

option

-

Option

Description

enable

Enable chassis load balancer state changes logging.

disable

Disable chassis load balancer state changes logging.

cpu-memory-usage

Enable/disable CPU & memory usage logging every 5 minutes.

option

-

Option

Description

enable

Enable CPU & memory usage logging every 5 minutes.

disable

Disable CPU & memory usage logging every 5 minutes.

dhcp

Enable/disable DHCP service messages logging.

option

-

Option

Description

enable

Enable DHCP service messages logging.

disable

Disable DHCP service messages logging.

dlp-archive *

Enable/disable DLP archive logging.

option

-

Option

Description

enable

Enable DLP archive logging.

disable

Disable DLP archive logging.

event

Enable/disable event logging.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

filter

Disk log filter.

string

Maximum length: 511

filter-type

Include/exclude logs that match the filter.

option

-

Option

Description

include

Include logs that match the filter.

exclude

Exclude logs that match the filter.

forward-traffic

Enable/disable forward traffic logging.

option

-

Option

Description

enable

Enable forward traffic logging.

disable

Disable forward traffic logging.

gtp *

Enable/disable GTP messages logging.

option

-

Option

Description

enable

Enable GTP messages logging.

disable

Disable GTP messages logging.

ha

Enable/disable HA logging.

option

-

Option

Description

enable

Enable HA logging.

disable

Disable HA logging.

ipsec

Enable/disable IPsec negotiation messages logging.

option

-

Option

Description

enable

Enable IPsec negotiation messages logging.

disable

Disable IPsec negotiation messages logging.

ldb-monitor

Enable/disable VIP real server health monitoring logging.

option

-

Option

Description

enable

Enable VIP real server health monitoring logging.

disable

Disable VIP real server health monitoring logging.

local-traffic

Enable/disable local in or out traffic logging.

option

-

Option

Description

enable

Enable local in or out traffic logging.

disable

Disable local in or out traffic logging.

multicast-traffic

Enable/disable multicast traffic logging.

option

-

Option

Description

enable

Enable multicast traffic logging.

disable

Disable multicast traffic logging.

pattern

Enable/disable pattern update logging.

option

-

Option

Description

enable

Enable pattern update logging.

disable

Disable pattern update logging.

ppp

Enable/disable L2TP/PPTP/PPPoE logging.

option

-

Option

Description

enable

Enable L2TP/PPTP/PPPoE logging.

disable

Disable L2TP/PPTP/PPPoE logging.

radius

Enable/disable RADIUS messages logging.

option

-

Option

Description

enable

Enable RADIUS messages logging.

disable

Disable RADIUS messages logging.

severity

Log to disk every message above and including this severity level.

option

-

Option

Description

emergency

Emergency level.

alert

Alert level.

critical

Critical level.

error

Error level.

warning

Warning level.

notification

Notification level.

information

Information level.

debug

Debug level.

sniffer-traffic

Enable/disable sniffer traffic logging.

option

-

Option

Description

enable

Enable sniffer traffic logging.

disable

Disable sniffer traffic logging.

sslvpn-log-adm

Enable/disable SSL administrator login logging.

option

-

Option

Description

enable

Enable SSL administrator logging.

disable

Disable SSL administrator logging.

sslvpn-log-auth

Enable/disable SSL user authentication logging.

option

-

Option

Description

enable

Enable SSL user authentication logging.

disable

Disable SSL user authentication logging.

sslvpn-log-session

Enable/disable SSL session logging.

option

-

Option

Description

enable

Enable SSL session logging.

disable

Disable SSL session logging.

system

Enable/disable system activity logging.

option

-

Option

Description

enable

Enable system activity logging.

disable

Disable system activity logging.

vip-ssl *

Enable/disable VIP SSL logging.

option

-

Option

Description

enable

Enable VIP SSL logging.

disable

Disable VIP SSL logging.

voip

Enable/disable VoIP logging.

option

-

Option

Description

enable

Enable VoIP logging.

disable

Disable VoIP logging.

wan-opt

Enable/disable WAN optimization event logging.

option

-

Option

Description

enable

Enable WAN optimization event logging.

disable

Disable WAN optimization event logging.

wireless-activity

Enable/disable wireless activity event logging.

option

-

Option

Description

enable

Enable wireless activity event logging.

disable

Disable wireless activity event logging.

* This parameter may not exist in some models.

config log disk filter

Configure filters for local disk logging. Use these filters to determine the log messages to record according to severity and type.

config log disk filter
    Description: Configure filters for local disk logging. Use these filters to determine the log messages to record according to severity and type.
    set admin [enable|disable]
    set anomaly [enable|disable]
    set auth [enable|disable]
    set chassis-loadbalance-ha [enable|disable]
    set cpu-memory-usage [enable|disable]
    set dhcp [enable|disable]
    set dlp-archive [enable|disable]
    set event [enable|disable]
    set filter {string}
    set filter-type [include|exclude]
    set forward-traffic [enable|disable]
    set gtp [enable|disable]
    set ha [enable|disable]
    set ipsec [enable|disable]
    set ldb-monitor [enable|disable]
    set local-traffic [enable|disable]
    set multicast-traffic [enable|disable]
    set pattern [enable|disable]
    set ppp [enable|disable]
    set radius [enable|disable]
    set severity [emergency|alert|...]
    set sniffer-traffic [enable|disable]
    set sslvpn-log-adm [enable|disable]
    set sslvpn-log-auth [enable|disable]
    set sslvpn-log-session [enable|disable]
    set system [enable|disable]
    set vip-ssl [enable|disable]
    set voip [enable|disable]
    set wan-opt [enable|disable]
    set wireless-activity [enable|disable]
end

config log disk filter

Parameter

Description

Type

Size

admin

Enable/disable admin login/logout logging.

option

-

Option

Description

enable

Enable admin login/logout logging.

disable

Disable admin login/logout logging.

anomaly

Enable/disable anomaly logging.

option

-

Option

Description

enable

Enable anomaly logging.

disable

Disable anomaly logging.

auth

Enable/disable firewall authentication logging.

option

-

Option

Description

enable

Enable firewall authentication logging.

disable

Disable firewall authentication logging.

chassis-loadbalance-ha *

Enable/disable chassis load balancer state changes logging.

option

-

Option

Description

enable

Enable chassis load balancer state changes logging.

disable

Disable chassis load balancer state changes logging.

cpu-memory-usage

Enable/disable CPU & memory usage logging every 5 minutes.

option

-

Option

Description

enable

Enable CPU & memory usage logging every 5 minutes.

disable

Disable CPU & memory usage logging every 5 minutes.

dhcp

Enable/disable DHCP service messages logging.

option

-

Option

Description

enable

Enable DHCP service messages logging.

disable

Disable DHCP service messages logging.

dlp-archive *

Enable/disable DLP archive logging.

option

-

Option

Description

enable

Enable DLP archive logging.

disable

Disable DLP archive logging.

event

Enable/disable event logging.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

filter

Disk log filter.

string

Maximum length: 511

filter-type

Include/exclude logs that match the filter.

option

-

Option

Description

include

Include logs that match the filter.

exclude

Exclude logs that match the filter.

forward-traffic

Enable/disable forward traffic logging.

option

-

Option

Description

enable

Enable forward traffic logging.

disable

Disable forward traffic logging.

gtp *

Enable/disable GTP messages logging.

option

-

Option

Description

enable

Enable GTP messages logging.

disable

Disable GTP messages logging.

ha

Enable/disable HA logging.

option

-

Option

Description

enable

Enable HA logging.

disable

Disable HA logging.

ipsec

Enable/disable IPsec negotiation messages logging.

option

-

Option

Description

enable

Enable IPsec negotiation messages logging.

disable

Disable IPsec negotiation messages logging.

ldb-monitor

Enable/disable VIP real server health monitoring logging.

option

-

Option

Description

enable

Enable VIP real server health monitoring logging.

disable

Disable VIP real server health monitoring logging.

local-traffic

Enable/disable local in or out traffic logging.

option

-

Option

Description

enable

Enable local in or out traffic logging.

disable

Disable local in or out traffic logging.

multicast-traffic

Enable/disable multicast traffic logging.

option

-

Option

Description

enable

Enable multicast traffic logging.

disable

Disable multicast traffic logging.

pattern

Enable/disable pattern update logging.

option

-

Option

Description

enable

Enable pattern update logging.

disable

Disable pattern update logging.

ppp

Enable/disable L2TP/PPTP/PPPoE logging.

option

-

Option

Description

enable

Enable L2TP/PPTP/PPPoE logging.

disable

Disable L2TP/PPTP/PPPoE logging.

radius

Enable/disable RADIUS messages logging.

option

-

Option

Description

enable

Enable RADIUS messages logging.

disable

Disable RADIUS messages logging.

severity

Log to disk every message above and including this severity level.

option

-

Option

Description

emergency

Emergency level.

alert

Alert level.

critical

Critical level.

error

Error level.

warning

Warning level.

notification

Notification level.

information

Information level.

debug

Debug level.

sniffer-traffic

Enable/disable sniffer traffic logging.

option

-

Option

Description

enable

Enable sniffer traffic logging.

disable

Disable sniffer traffic logging.

sslvpn-log-adm

Enable/disable SSL administrator login logging.

option

-

Option

Description

enable

Enable SSL administrator logging.

disable

Disable SSL administrator logging.

sslvpn-log-auth

Enable/disable SSL user authentication logging.

option

-

Option

Description

enable

Enable SSL user authentication logging.

disable

Disable SSL user authentication logging.

sslvpn-log-session

Enable/disable SSL session logging.

option

-

Option

Description

enable

Enable SSL session logging.

disable

Disable SSL session logging.

system

Enable/disable system activity logging.

option

-

Option

Description

enable

Enable system activity logging.

disable

Disable system activity logging.

vip-ssl *

Enable/disable VIP SSL logging.

option

-

Option

Description

enable

Enable VIP SSL logging.

disable

Disable VIP SSL logging.

voip

Enable/disable VoIP logging.

option

-

Option

Description

enable

Enable VoIP logging.

disable

Disable VoIP logging.

wan-opt

Enable/disable WAN optimization event logging.

option

-

Option

Description

enable

Enable WAN optimization event logging.

disable

Disable WAN optimization event logging.

wireless-activity

Enable/disable wireless activity event logging.

option

-

Option

Description

enable

Enable wireless activity event logging.

disable

Disable wireless activity event logging.

* This parameter may not exist in some models.