Fortinet black logo

CLI Reference

log syslog-policy

log syslog-policy

Use this command to configure a connection to one or more Syslog servers. Each policy can specify connections for up to three Syslog servers. The log syslogd configuration uses the policy to define the specific Syslog server or servers on which log messages are stored. For details, see log syslogd.

To use this command, your administrator account’s access control profile must have either w or rw permission to the loggrp area. For details, see Permissions.

Syntax

config log syslog-policy

edit "<policy_name>"

config syslog-server-list

edit <entry_index>

set csv {enable | disable}

set port <port_int>

set server "<syslog_ipv4>"

set tls {enable | disable}

end

next

end

Variable Description Default

"<policy_name>"

Enter the name of a new or existing Syslog policy. The maximum length is 63 characters.

The name of the report profile will be included in the report header.

To display the list of existing policies, enter:

edit ?

No default.

<entry_index>

Enter the index number of the individual entry in the table.

You can create up to 3 connections.
No default.

csv {enable | disable}

Enable if the Syslog server requires the FortiWeb appliance to send log messages in comma-separated value (CSV) format, instead of the standard Syslog format. disable

port <port_int>

Enter the port number on which the Syslog server listens.

The valid range is 1–65,535.

514

server "<syslog_ipv4>"

Enter the IP address of the Syslog server. No default.

tls {enable | disable}

Enables TLS to establish a secure connection between FortiWeband the specified Syslog server for sending log data.

disable

Example

This example creates Syslog_Policy1. The Syslog server is contacted by its IP address, 192.168.1.10. Communications occur over the standard port number for Syslog, UDP port 514. The FortiWeb appliance sends log messages to the Syslog server in CSV format.

config log syslog-policy

edit "Syslog_Policy1"

config log-server-list

edit 1

set server "192.168.1.10"

set port 514

set csv enable

end

next

end

Related topics

log syslog-policy

Use this command to configure a connection to one or more Syslog servers. Each policy can specify connections for up to three Syslog servers. The log syslogd configuration uses the policy to define the specific Syslog server or servers on which log messages are stored. For details, see log syslogd.

To use this command, your administrator account’s access control profile must have either w or rw permission to the loggrp area. For details, see Permissions.

Syntax

config log syslog-policy

edit "<policy_name>"

config syslog-server-list

edit <entry_index>

set csv {enable | disable}

set port <port_int>

set server "<syslog_ipv4>"

set tls {enable | disable}

end

next

end

Variable Description Default

"<policy_name>"

Enter the name of a new or existing Syslog policy. The maximum length is 63 characters.

The name of the report profile will be included in the report header.

To display the list of existing policies, enter:

edit ?

No default.

<entry_index>

Enter the index number of the individual entry in the table.

You can create up to 3 connections.
No default.

csv {enable | disable}

Enable if the Syslog server requires the FortiWeb appliance to send log messages in comma-separated value (CSV) format, instead of the standard Syslog format. disable

port <port_int>

Enter the port number on which the Syslog server listens.

The valid range is 1–65,535.

514

server "<syslog_ipv4>"

Enter the IP address of the Syslog server. No default.

tls {enable | disable}

Enables TLS to establish a secure connection between FortiWeband the specified Syslog server for sending log data.

disable

Example

This example creates Syslog_Policy1. The Syslog server is contacted by its IP address, 192.168.1.10. Communications occur over the standard port number for Syslog, UDP port 514. The FortiWeb appliance sends log messages to the Syslog server in CSV format.

config log syslog-policy

edit "Syslog_Policy1"

config log-server-list

edit 1

set server "192.168.1.10"

set port 514

set csv enable

end

next

end

Related topics