config log fortianalyzer setting
Global FortiAnalyzer settings.
config log fortianalyzer setting Description: Global FortiAnalyzer settings. set access-config [enable|disable] set certificate {string} set certificate-verification [enable|disable] set conn-timeout {integer} set enc-algorithm [high-medium|high|...] set hmac-algorithm [sha256|sha1] set interface {string} set interface-select-method [auto|sdwan|...] set ips-archive [enable|disable] set max-log-rate {integer} set monitor-failure-retry-period {integer} set monitor-keepalive-period {integer} set preshared-key {string} set priority [default|low] set reliable [enable|disable] set serial <name1>, <name2>, ... set server {string} set source-ip {string} set ssl-min-proto-version [default|SSLv3|...] set status [enable|disable] set upload-day {user} set upload-interval [daily|weekly|...] set upload-option [store-and-upload|realtime|...] set upload-time {user} end
config log fortianalyzer setting
Parameter |
Description |
Type |
Size |
Default |
||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
access-config |
Enable/disable FortiAnalyzer access to configuration and data. |
option |
- |
enable |
||||||||||||
|
|
|||||||||||||||
certificate |
Certificate used to communicate with FortiAnalyzer. |
string |
Maximum length: 35 |
|
||||||||||||
certificate-verification |
Enable/disable identity verification of FortiAnalyzer by use of certificate. |
option |
- |
enable |
||||||||||||
|
|
|||||||||||||||
conn-timeout |
FortiAnalyzer connection time-out in seconds (for status and log buffer). |
integer |
Minimum value: 1 Maximum value: 3600 |
10 |
||||||||||||
enc-algorithm |
Configure the level of SSL protection for secure communication with FortiAnalyzer. |
option |
- |
high |
||||||||||||
|
|
|||||||||||||||
hmac-algorithm |
FortiAnalyzer IPsec tunnel HMAC algorithm. |
option |
- |
sha256 |
||||||||||||
|
|
|||||||||||||||
interface |
Specify outgoing interface to reach server. |
string |
Maximum length: 15 |
|
||||||||||||
interface-select-method |
Specify how to select outgoing interface to reach server. |
option |
- |
auto |
||||||||||||
|
|
|||||||||||||||
ips-archive |
Enable/disable IPS packet archive logging. |
option |
- |
enable |
||||||||||||
|
|
|||||||||||||||
max-log-rate |
FortiAnalyzer maximum log rate in MBps (0 = unlimited). |
integer |
Minimum value: 0 Maximum value: 100000 |
0 |
||||||||||||
monitor-failure-retry-period |
Time between FortiAnalyzer connection retries in seconds (for status and log buffer). |
integer |
Minimum value: 1 Maximum value: 86400 |
5 |
||||||||||||
monitor-keepalive-period |
Time between OFTP keepalives in seconds (for status and log buffer). |
integer |
Minimum value: 1 Maximum value: 120 |
5 |
||||||||||||
preshared-key |
Preshared-key used for auto-authorization on FortiAnalyzer. |
string |
Maximum length: 63 |
|
||||||||||||
priority |
Set log transmission priority. |
option |
- |
default |
||||||||||||
|
|
|||||||||||||||
reliable |
Enable/disable reliable logging to FortiAnalyzer. |
option |
- |
disable |
||||||||||||
|
|
|||||||||||||||
serial |
Serial numbers of the FortiAnalyzer. Serial Number. |
string |
Maximum length: 79 |
|
||||||||||||
server |
The remote FortiAnalyzer. |
string |
Maximum length: 127 |
|
||||||||||||
source-ip |
Source IPv4 or IPv6 address used to communicate with FortiAnalyzer. |
string |
Maximum length: 63 |
|
||||||||||||
ssl-min-proto-version |
Minimum supported protocol version for SSL/TLS connections. |
option |
- |
default |
||||||||||||
|
|
|||||||||||||||
status |
Enable/disable logging to FortiAnalyzer. |
option |
- |
disable |
||||||||||||
|
|
|||||||||||||||
upload-day |
Day of week (month) to upload logs. |
user |
Not Specified |
|
||||||||||||
upload-interval |
Frequency to upload log files to FortiAnalyzer. |
option |
- |
daily |
||||||||||||
|
|
|||||||||||||||
upload-option |
Enable/disable logging to hard disk and then uploading to FortiAnalyzer. |
option |
- |
5-minute |
||||||||||||
|
|
|||||||||||||||
upload-time |
Time to upload logs (hh:mm). |
user |
Not Specified |
|