Configuring logging and analytics

FortiAnalyzer or Cloud Logging is a required component for the Security Fabric. Either FortiAnalyzer, FortiAnalyzer Cloud, or FortiGate Cloud can be used to met this requirement. These settings are configured on the Logging & Analytics card on the Security Fabric > Fabric Connectors page. If there are multiple services enrolled on the FortiGate, the preference is: FortiAnalyzer Cloud logging, FortiAnalyzer logging, then FortiGate Cloud logging.

The following topics provide more information about configuring the logging and analytics connector:

• Configuring FortiAnalyzer

• Configuring cloud logging

Logs Sent daily chart for remote logging sources

The Logs Sent widget displays a chart for a select remote logging source (FortiAnalyzer, FortiGate Cloud, and FortiAnalyzer Cloud). Once configured, the same data is available on the FortiAnalyzer and Cloud Logging tabs of the Logging & Analytics card.

To add the Logs Sent widget:

1. Go to Dashboard > Status and click Add Widget.

2. Search for Logs Sent and click to add the widget to the dashboard.

3. Select a Logging Source (FortiAnalyzer, FortiAnalyzer Cloud, or FortiGate Cloud). FortiAnalyzer Cloud is used in this example.

4. Click OK and click Close. The FortiAnalyzer Logs Sent Daily widget is displayed in the dashboard.

   

To view the chart on the Logging & Analytics card:

1. Go to Security Fabric > Fabric Connectors and double-click the Logging & Analytics card.

   The Logging Settings pane is displayed.

2. Go to the FortiAnalyzer or Cloud Logging tabs to view the Remote Logs Sent Daily chart. FortiAnalyzer Cloud is used in this example.

   

3. Click OK to close the pane.