Fortinet FortiGate-800 - Manual (Page 312)

312
Fortinet Inc.
Recording logs Logging and reporting
Recording logs in system memory
If your FortiGate unit does not contain a hard disk, you can configure the FortiGate
unit to reserve some system memory for storing current event, attack, antivirus, web
filter, and email filter log messages. Logging to memory allows quick access to only
the most recent log entries. The FortiGate unit can store a limited number of
messages in system memory. After all available memory is used, the FortiGate unit
deletes the oldest messages. If the FortiGate unit restarts, the log entries are lost.
To record logs in system memory
1 Go to Log&Report > Log Setting.
2 Select the Log to memory check box.
3 Select the severity level for which you want to record log messages.
The FortiGate logs all levels of severity down to, but not lower than, the level you
choose. For example, if you want to record emergency, alert, critical, and error
messages, select Error.
See
“Log message levels” on page 312 .
4 Select Config Policy.
To configure the FortiGate to filter the types of logs and events to record, use the
procedures in
“Filtering log messages” on page 313 .
5 Select Apply.
Log message levels
Table 43 lists and describes FortiGate log message levels.
Note: The FortiGate unit can record only the event and attack log messages in system memory.
Table 43: FortiGate log message levels
Levels Description Generated by
0 - Emergency The system has become unstable. Emergency messages not
available.
1 - Alert Immediate action is required. NIDS attack log messages.
2 - Critical Functionality is affected. DHCP
3 - Error An error condition exists and
functionality could be affected.
Error messages not available.
4 - Warning Functionality could be affected. Antivirus, Web filter, email filter, and
system event log messages.
5 - Notice Information about normal events. Antivirus, Web filter, and email filter
log messages.
6 - Information General information about system
operations.
Antivirus, Web filter, email filter log
messages, and other event log
messages.