Technical Note: Forwarding local EVENT logs of FortiAnalyzer or FortiManager to another device

[mkannan]

Description

This article explains how to forward local event logs from one FortiAnalyer or FortiManager to another one.

Scope

V5.4 and above.

Solution

On the FortiAnalyzer or FortiManager:
  -  Navigate to Advanced > Device Log Settings.

  -  Enable the checkbox

  -  Specify the IP address of other FortiAnalyzer/FortiManager device.

  -  On upload option, opt for Real-Time.

  -  Specify security level as Information.