syslog

Use this command to configure syslog servers.

Syntax

config system syslog

edit <name>

set ip <string>

set local-cert {Fortinet_Local | Fortinet_Local2}

set peer-cert-cn <string>

set port <integer>

set reliable {enable | disable}

set secure-connection {enable | disable}

set ssl-protocol {follow-global-ssl-protocol | sslv3 | tlsv1.0 | tlsv1.1 | tlsv1.2 | tlsv1.3}

end

end

Variable	Description
<name>	Syslog server name.
ip <string>	Enter the syslog server IPv4/IPv6 address or hostname.
local-cert {Fortinet_Local | Fortinet_Local2}	Select from the two available local certificates used for secure connection. This variable is only available when secure-connection is enabled.
peer-cert-cn <string>	Certificate common name of syslog server. This variable is only available when secure-connection is enabled. Note: Null or '-' means no certificate CN for the syslog server.
port <integer>	Enter the syslog server port (1 - 65535, default = 514).
reliable {enable | disable}	Enable/disable reliable connection with syslog server (default = disable).
secure-connection {enable | disable}	Enable/disable connection secured by TLS/SSL (default = disable). This variable is only available when reliable is enabled.
ssl-protocol {follow-global-ssl-protocol | sslv3 | tlsv1.0 | tlsv1.1 | tlsv1.2 | tlsv1.3}	Set the lowest SSL protocol version for connection to syslog server. This variable is only available when secure-connection is enabled.