Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

config log setting

Configure general log settings.

config log setting

Description: Configure general log settings.

set resolve-ip [enable|disable]

set resolve-port [enable|disable]

set log-user-in-upper [enable|disable]

set fwpolicy-implicit-log [enable|disable]

set fwpolicy6-implicit-log [enable|disable]

set log-invalid-packet [enable|disable]

set local-in-allow [enable|disable]

set local-in-deny-unicast [enable|disable]

set local-in-deny-broadcast [enable|disable]

set local-out [enable|disable]

set daemon-log [enable|disable]

set neighbor-event [enable|disable]

set brief-traffic-format [enable|disable]

set user-anonymize [enable|disable]

set fortiview-weekly-data [enable|disable]

set expolicy-implicit-log [enable|disable]

set log-policy-comment [enable|disable]

set log-policy-name [enable|disable]

set faz-override [enable|disable]

set syslog-override [enable|disable]

set custom-log-fields <field-id1>, <field-id2>, ...

end

config log setting

Parameter name

Description

Type

Size

resolve-ip

Enable/disable adding resolved domain names to traffic logs if possible.

option

-

 

Option

Description

enable

Enable adding resolved domain names to traffic logs.

disable

Disable adding resolved domain names to traffic logs.

resolve-port

Enable/disable adding resolved service names to traffic logs.

option

-

 

Option

Description

enable

Enable adding resolved service names to traffic logs.

disable

Disable adding resolved service names to traffic logs.

log-user-in-upper

Enable/disable logs with user-in-upper.

option

-

 

Option

Description

enable

Enable logs with user-in-upper.

disable

Disable logs with user-in-upper.

fwpolicy-implicit-log

Enable/disable implicit firewall policy logging.

option

-

 

Option

Description

enable

Enable implicit firewall policy logging.

disable

Disable implicit firewall policy logging.

fwpolicy6-implicit-log

Enable/disable implicit firewall policy6 logging.

option

-

 

Option

Description

enable

Enable implicit firewall policy6 logging.

disable

Disable implicit firewall policy6 logging.

log-invalid-packet

Enable/disable invalid packet traffic logging.

option

-

 

Option

Description

enable

Enable invalid packet traffic logging.

disable

Disable invalid packet traffic logging.

local-in-allow

Enable/disable local-in-allow logging.

option

-

 

Option

Description

enable

Enable local-in-allow logging.

disable

Disable local-in-allow logging.

local-in-deny-unicast

Enable/disable local-in-deny-unicast logging.

option

-

 

Option

Description

enable

Enable local-in-deny-unicast logging.

disable

Disable local-in-deny-unicast logging.

local-in-deny-broadcast

Enable/disable local-in-deny-broadcast logging.

option

-

 

Option

Description

enable

Enable local-in-deny-broadcast logging.

disable

Disable local-in-deny-broadcast logging.

local-out

Enable/disable local-out logging.

option

-

 

Option

Description

enable

Enable local-out logging.

disable

Disable local-out logging.

daemon-log

Enable/disable daemon logging.

option

-

 

Option

Description

enable

Enable daemon logging.

disable

Disable daemon logging.

neighbor-event

Enable/disable neighbor event logging.

option

-

 

Option

Description

enable

Enable neighbor event logging.

disable

Disable neighbor event logging.

brief-traffic-format

Enable/disable brief format traffic logging.

option

-

 

Option

Description

enable

Enable brief format traffic logging.

disable

Disable brief format traffic logging.

user-anonymize

Enable/disable anonymizing user names in log messages.

option

-

 

Option

Description

enable

Enable anonymizing user names in log messages.

disable

Disable anonymizing user names in log messages.

fortiview-weekly-data

Enable/disable FortiView weekly data.

option

-

 

Option

Description

enable

Enable FortiView weekly data.

disable

Disable FortiView weekly data.

expolicy-implicit-log

Enable/disable explicit proxy firewall implicit policy logging.

option

-

 

Option

Description

enable

Enable explicit proxy firewall implicit policy logging.

disable

Disable explicit proxy firewall implicit policy logging.

log-policy-comment

Enable/disable inserting policy comments into traffic logs.

option

-

 

Option

Description

enable

Enable inserting policy comments into traffic logs.

disable

Disable inserting policy comments into traffic logs.

log-policy-name

Enable/disable inserting policy name into traffic logs.

option

-

 

Option

Description

enable

Enable inserting policy name into traffic logs.

disable

Disable inserting policy name into traffic logs.

faz-override

Enable/disable override FortiAnalyzer settings.

option

-

 

Option

Description

enable

Enable override FortiAnalyzer settings.

disable

Disable override FortiAnalyzer settings.

syslog-override

Enable/disable override Syslog settings.

option

-

 

Option

Description

enable

Enable override Syslog settings.

disable

Disable override Syslog settings.

custom-log-fields <field-id>

Custom fields to append to all log messages.

Custom log field.

string

Maximum length: 35

config log setting

Configure general log settings.

config log setting

Description: Configure general log settings.

set resolve-ip [enable|disable]

set resolve-port [enable|disable]

set log-user-in-upper [enable|disable]

set fwpolicy-implicit-log [enable|disable]

set fwpolicy6-implicit-log [enable|disable]

set log-invalid-packet [enable|disable]

set local-in-allow [enable|disable]

set local-in-deny-unicast [enable|disable]

set local-in-deny-broadcast [enable|disable]

set local-out [enable|disable]

set daemon-log [enable|disable]

set neighbor-event [enable|disable]

set brief-traffic-format [enable|disable]

set user-anonymize [enable|disable]

set fortiview-weekly-data [enable|disable]

set expolicy-implicit-log [enable|disable]

set log-policy-comment [enable|disable]

set log-policy-name [enable|disable]

set faz-override [enable|disable]

set syslog-override [enable|disable]

set custom-log-fields <field-id1>, <field-id2>, ...

end

config log setting

Parameter name

Description

Type

Size

resolve-ip

Enable/disable adding resolved domain names to traffic logs if possible.

option

-

 

Option

Description

enable

Enable adding resolved domain names to traffic logs.

disable

Disable adding resolved domain names to traffic logs.

resolve-port

Enable/disable adding resolved service names to traffic logs.

option

-

 

Option

Description

enable

Enable adding resolved service names to traffic logs.

disable

Disable adding resolved service names to traffic logs.

log-user-in-upper

Enable/disable logs with user-in-upper.

option

-

 

Option

Description

enable

Enable logs with user-in-upper.

disable

Disable logs with user-in-upper.

fwpolicy-implicit-log

Enable/disable implicit firewall policy logging.

option

-

 

Option

Description

enable

Enable implicit firewall policy logging.

disable

Disable implicit firewall policy logging.

fwpolicy6-implicit-log

Enable/disable implicit firewall policy6 logging.

option

-

 

Option

Description

enable

Enable implicit firewall policy6 logging.

disable

Disable implicit firewall policy6 logging.

log-invalid-packet

Enable/disable invalid packet traffic logging.

option

-

 

Option

Description

enable

Enable invalid packet traffic logging.

disable

Disable invalid packet traffic logging.

local-in-allow

Enable/disable local-in-allow logging.

option

-

 

Option

Description

enable

Enable local-in-allow logging.

disable

Disable local-in-allow logging.

local-in-deny-unicast

Enable/disable local-in-deny-unicast logging.

option

-

 

Option

Description

enable

Enable local-in-deny-unicast logging.

disable

Disable local-in-deny-unicast logging.

local-in-deny-broadcast

Enable/disable local-in-deny-broadcast logging.

option

-

 

Option

Description

enable

Enable local-in-deny-broadcast logging.

disable

Disable local-in-deny-broadcast logging.

local-out

Enable/disable local-out logging.

option

-

 

Option

Description

enable

Enable local-out logging.

disable

Disable local-out logging.

daemon-log

Enable/disable daemon logging.

option

-

 

Option

Description

enable

Enable daemon logging.

disable

Disable daemon logging.

neighbor-event

Enable/disable neighbor event logging.

option

-

 

Option

Description

enable

Enable neighbor event logging.

disable

Disable neighbor event logging.

brief-traffic-format

Enable/disable brief format traffic logging.

option

-

 

Option

Description

enable

Enable brief format traffic logging.

disable

Disable brief format traffic logging.

user-anonymize

Enable/disable anonymizing user names in log messages.

option

-

 

Option

Description

enable

Enable anonymizing user names in log messages.

disable

Disable anonymizing user names in log messages.

fortiview-weekly-data

Enable/disable FortiView weekly data.

option

-

 

Option

Description

enable

Enable FortiView weekly data.

disable

Disable FortiView weekly data.

expolicy-implicit-log

Enable/disable explicit proxy firewall implicit policy logging.

option

-

 

Option

Description

enable

Enable explicit proxy firewall implicit policy logging.

disable

Disable explicit proxy firewall implicit policy logging.

log-policy-comment

Enable/disable inserting policy comments into traffic logs.

option

-

 

Option

Description

enable

Enable inserting policy comments into traffic logs.

disable

Disable inserting policy comments into traffic logs.

log-policy-name

Enable/disable inserting policy name into traffic logs.

option

-

 

Option

Description

enable

Enable inserting policy name into traffic logs.

disable

Disable inserting policy name into traffic logs.

faz-override

Enable/disable override FortiAnalyzer settings.

option

-

 

Option

Description

enable

Enable override FortiAnalyzer settings.

disable

Disable override FortiAnalyzer settings.

syslog-override

Enable/disable override Syslog settings.

option

-

 

Option

Description

enable

Enable override Syslog settings.

disable

Disable override Syslog settings.

custom-log-fields <field-id>

Custom fields to append to all log messages.

Custom log field.

string

Maximum length: 35