Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

config log disk filter

Configure filters for local disk logging. Use these filters to determine the log messages to record according to severity and type.

config log disk filter

Description: Configure filters for local disk logging. Use these filters to determine the log messages to record according to severity and type.

set severity [emergency|alert|...]

set forward-traffic [enable|disable]

set local-traffic [enable|disable]

set multicast-traffic [enable|disable]

set sniffer-traffic [enable|disable]

set anomaly [enable|disable]

set voip [enable|disable]

set dlp-archive [enable|disable]

set gtp [enable|disable]

set event [enable|disable]

set system [enable|disable]

set radius [enable|disable]

set ipsec [enable|disable]

set dhcp [enable|disable]

set ppp [enable|disable]

set admin [enable|disable]

set ha [enable|disable]

set auth [enable|disable]

set pattern [enable|disable]

set sslvpn-log-auth [enable|disable]

set sslvpn-log-adm [enable|disable]

set sslvpn-log-session [enable|disable]

set vip-ssl [enable|disable]

set ldb-monitor [enable|disable]

set wan-opt [enable|disable]

set wireless-activity [enable|disable]

set cpu-memory-usage [enable|disable]

set filter {string}

set filter-type [include|exclude]

end

config log disk filter

Parameter name

Description

Type

Size

severity

Log to disk every message above and including this severity level.

option

-

 

Option

Description

emergency

Emergency level.

alert

Alert level.

critical

Critical level.

error

Error level.

warning

Warning level.

notification

Notification level.

information

Information level.

debug

Debug level.

forward-traffic

Enable/disable forward traffic logging.

option

-

 

Option

Description

enable

Enable forward traffic logging.

disable

Disable forward traffic logging.

local-traffic

Enable/disable local in or out traffic logging.

option

-

 

Option

Description

enable

Enable local in or out traffic logging.

disable

Disable local in or out traffic logging.

multicast-traffic

Enable/disable multicast traffic logging.

option

-

 

Option

Description

enable

Enable multicast traffic logging.

disable

Disable multicast traffic logging.

sniffer-traffic

Enable/disable sniffer traffic logging.

option

-

 

Option

Description

enable

Enable sniffer traffic logging.

disable

Disable sniffer traffic logging.

anomaly

Enable/disable anomaly logging.

option

-

 

Option

Description

enable

Enable anomaly logging.

disable

Disable anomaly logging.

voip

Enable/disable VoIP logging.

option

-

 

Option

Description

enable

Enable VoIP logging.

disable

Disable VoIP logging.

dlp-archive

Enable/disable DLP archive logging.

option

-

 

Option

Description

enable

Enable DLP archive logging.

disable

Disable DLP archive logging.

gtp

Enable/disable GTP messages logging.

option

-

 

Option

Description

enable

Enable GTP messages logging.

disable

Disable GTP messages logging.

event

Enable/disable event logging.

option

-

 

Option

Description

enable

Enable setting.

disable

Disable setting.

system

Enable/disable system activity logging.

option

-

 

Option

Description

enable

Enable system activity logging.

disable

Disable system activity logging.

radius

Enable/disable RADIUS messages logging.

option

-

 

Option

Description

enable

Enable RADIUS messages logging.

disable

Disable RADIUS messages logging.

ipsec

Enable/disable IPsec negotiation messages logging.

option

-

 

Option

Description

enable

Enable IPsec negotiation messages logging.

disable

Disable IPsec negotiation messages logging.

dhcp

Enable/disable DHCP service messages logging.

option

-

 

Option

Description

enable

Enable DHCP service messages logging.

disable

Disable DHCP service messages logging.

ppp

Enable/disable L2TP/PPTP/PPPoE logging.

option

-

 

Option

Description

enable

Enable L2TP/PPTP/PPPoE logging.

disable

Disable L2TP/PPTP/PPPoE logging.

admin

Enable/disable admin login/logout logging.

option

-

 

Option

Description

enable

Enable admin login/logout logging.

disable

Disable admin login/logout logging.

ha

Enable/disable HA logging.

option

-

 

Option

Description

enable

Enable HA logging.

disable

Disable HA logging.

auth

Enable/disable firewall authentication logging.

option

-

 

Option

Description

enable

Enable firewall authentication logging.

disable

Disable firewall authentication logging.

pattern

Enable/disable pattern update logging.

option

-

 

Option

Description

enable

Enable pattern update logging.

disable

Disable pattern update logging.

sslvpn-log-auth

Enable/disable SSL user authentication logging.

option

-

 

Option

Description

enable

Enable SSL user authentication logging.

disable

Disable SSL user authentication logging.

sslvpn-log-adm

Enable/disable SSL administrator login logging.

option

-

 

Option

Description

enable

Enable SSL administrator logging.

disable

Disable SSL administrator logging.

sslvpn-log-session

Enable/disable SSL session logging.

option

-

 

Option

Description

enable

Enable SSL session logging.

disable

Disable SSL session logging.

vip-ssl

Enable/disable VIP SSL logging.

option

-

 

Option

Description

enable

Enable VIP SSL logging.

disable

Disable VIP SSL logging.

ldb-monitor

Enable/disable VIP real server health monitoring logging.

option

-

 

Option

Description

enable

Enable VIP real server health monitoring logging.

disable

Disable VIP real server health monitoring logging.

wan-opt

Enable/disable WAN optimization event logging.

option

-

 

Option

Description

enable

Enable WAN optimization event logging.

disable

Disable WAN optimization event logging.

wireless-activity

Enable/disable wireless activity event logging.

option

-

 

Option

Description

enable

Enable wireless activity event logging.

disable

Disable wireless activity event logging.

cpu-memory-usage

Enable/disable CPU & memory usage logging every 5 minutes.

option

-

 

Option

Description

enable

Enable CPU & memory usage logging every 5 minutes.

disable

Disable CPU & memory usage logging every 5 minutes.

filter

Disk log filter.

string

Maximum length: 511

filter-type

Include/exclude logs that match the filter.

option

-

 

Option

Description

include

Include logs that match the filter.

exclude

Exclude logs that match the filter.

config log disk filter

Configure filters for local disk logging. Use these filters to determine the log messages to record according to severity and type.

config log disk filter

Description: Configure filters for local disk logging. Use these filters to determine the log messages to record according to severity and type.

set severity [emergency|alert|...]

set forward-traffic [enable|disable]

set local-traffic [enable|disable]

set multicast-traffic [enable|disable]

set sniffer-traffic [enable|disable]

set anomaly [enable|disable]

set voip [enable|disable]

set dlp-archive [enable|disable]

set gtp [enable|disable]

set event [enable|disable]

set system [enable|disable]

set radius [enable|disable]

set ipsec [enable|disable]

set dhcp [enable|disable]

set ppp [enable|disable]

set admin [enable|disable]

set ha [enable|disable]

set auth [enable|disable]

set pattern [enable|disable]

set sslvpn-log-auth [enable|disable]

set sslvpn-log-adm [enable|disable]

set sslvpn-log-session [enable|disable]

set vip-ssl [enable|disable]

set ldb-monitor [enable|disable]

set wan-opt [enable|disable]

set wireless-activity [enable|disable]

set cpu-memory-usage [enable|disable]

set filter {string}

set filter-type [include|exclude]

end

config log disk filter

Parameter name

Description

Type

Size

severity

Log to disk every message above and including this severity level.

option

-

 

Option

Description

emergency

Emergency level.

alert

Alert level.

critical

Critical level.

error

Error level.

warning

Warning level.

notification

Notification level.

information

Information level.

debug

Debug level.

forward-traffic

Enable/disable forward traffic logging.

option

-

 

Option

Description

enable

Enable forward traffic logging.

disable

Disable forward traffic logging.

local-traffic

Enable/disable local in or out traffic logging.

option

-

 

Option

Description

enable

Enable local in or out traffic logging.

disable

Disable local in or out traffic logging.

multicast-traffic

Enable/disable multicast traffic logging.

option

-

 

Option

Description

enable

Enable multicast traffic logging.

disable

Disable multicast traffic logging.

sniffer-traffic

Enable/disable sniffer traffic logging.

option

-

 

Option

Description

enable

Enable sniffer traffic logging.

disable

Disable sniffer traffic logging.

anomaly

Enable/disable anomaly logging.

option

-

 

Option

Description

enable

Enable anomaly logging.

disable

Disable anomaly logging.

voip

Enable/disable VoIP logging.

option

-

 

Option

Description

enable

Enable VoIP logging.

disable

Disable VoIP logging.

dlp-archive

Enable/disable DLP archive logging.

option

-

 

Option

Description

enable

Enable DLP archive logging.

disable

Disable DLP archive logging.

gtp

Enable/disable GTP messages logging.

option

-

 

Option

Description

enable

Enable GTP messages logging.

disable

Disable GTP messages logging.

event

Enable/disable event logging.

option

-

 

Option

Description

enable

Enable setting.

disable

Disable setting.

system

Enable/disable system activity logging.

option

-

 

Option

Description

enable

Enable system activity logging.

disable

Disable system activity logging.

radius

Enable/disable RADIUS messages logging.

option

-

 

Option

Description

enable

Enable RADIUS messages logging.

disable

Disable RADIUS messages logging.

ipsec

Enable/disable IPsec negotiation messages logging.

option

-

 

Option

Description

enable

Enable IPsec negotiation messages logging.

disable

Disable IPsec negotiation messages logging.

dhcp

Enable/disable DHCP service messages logging.

option

-

 

Option

Description

enable

Enable DHCP service messages logging.

disable

Disable DHCP service messages logging.

ppp

Enable/disable L2TP/PPTP/PPPoE logging.

option

-

 

Option

Description

enable

Enable L2TP/PPTP/PPPoE logging.

disable

Disable L2TP/PPTP/PPPoE logging.

admin

Enable/disable admin login/logout logging.

option

-

 

Option

Description

enable

Enable admin login/logout logging.

disable

Disable admin login/logout logging.

ha

Enable/disable HA logging.

option

-

 

Option

Description

enable

Enable HA logging.

disable

Disable HA logging.

auth

Enable/disable firewall authentication logging.

option

-

 

Option

Description

enable

Enable firewall authentication logging.

disable

Disable firewall authentication logging.

pattern

Enable/disable pattern update logging.

option

-

 

Option

Description

enable

Enable pattern update logging.

disable

Disable pattern update logging.

sslvpn-log-auth

Enable/disable SSL user authentication logging.

option

-

 

Option

Description

enable

Enable SSL user authentication logging.

disable

Disable SSL user authentication logging.

sslvpn-log-adm

Enable/disable SSL administrator login logging.

option

-

 

Option

Description

enable

Enable SSL administrator logging.

disable

Disable SSL administrator logging.

sslvpn-log-session

Enable/disable SSL session logging.

option

-

 

Option

Description

enable

Enable SSL session logging.

disable

Disable SSL session logging.

vip-ssl

Enable/disable VIP SSL logging.

option

-

 

Option

Description

enable

Enable VIP SSL logging.

disable

Disable VIP SSL logging.

ldb-monitor

Enable/disable VIP real server health monitoring logging.

option

-

 

Option

Description

enable

Enable VIP real server health monitoring logging.

disable

Disable VIP real server health monitoring logging.

wan-opt

Enable/disable WAN optimization event logging.

option

-

 

Option

Description

enable

Enable WAN optimization event logging.

disable

Disable WAN optimization event logging.

wireless-activity

Enable/disable wireless activity event logging.

option

-

 

Option

Description

enable

Enable wireless activity event logging.

disable

Disable wireless activity event logging.

cpu-memory-usage

Enable/disable CPU & memory usage logging every 5 minutes.

option

-

 

Option

Description

enable

Enable CPU & memory usage logging every 5 minutes.

disable

Disable CPU & memory usage logging every 5 minutes.

filter

Disk log filter.

string

Maximum length: 511

filter-type

Include/exclude logs that match the filter.

option

-

 

Option

Description

include

Include logs that match the filter.

exclude

Exclude logs that match the filter.