Centrally configuring FortiGate to send logs to managed FortiAnalyzer

After adding FortiAnalyzer to FortiManager, the device list is also synchronized to FortiAnalyzer. To make these FortiGate devices send log to FortiAnalyzer, you can use provisioning templates to centrally configure the log settings for FortiGates.

To centrally configure logging:

1. In FortiManager, go to Device Manager > Provisioning templates.
2. Create a new blank system template.
   1. In the content pane, click Create New.
   2. Type a name for the system template, and click OK.

      The system template is created.

   3. Select the system template, and click Edit.

      The template opens for editing. You can enable the Log Settings widget by selecting it from the Toggle Widgets dropdown.

      

   4. In the Log Settings widget, select Send Logs to FortiAnalyzer/FortiManager.
   5. Select Managed FortiAnalyzer, and select the unit from the drop-down list.
   6. Click Apply.
3. Assign the system template to FortiGates.
4. Install the system template to FortiGates.