Fortinet FortiAnalyzer-100A, Administration Manual

Page: 50 / 162

FortiAnalyzer Version 3.0 MR3 Administration Guide
50 05-30003-0082-20060925
Configuring the FortiAnalyzer unit Configure the FortiAnalyzer unit
Log Settings
The FortiAnalyzer unit creates its own system log messages to provide
information on system events occurring on the unit, such as system activity,
administration events and IPSec negotiations for secure transfers of log message
packets.
To configure where the FortiAnalyzer unit saves its own log messages, go to
System > Config > Log Setting .
Figure 15: System settings
Log Locally Select this option to save the FortiAnalyzer log messages on the
FortiAnalyzer hard disk.
Log Level Select the severity level for the log messages recorded to the
FortiAnalyzer hard disk. The FortiAnalyzer unit logs all levels of
severity down to, but not lower than, the level you select. For
example, if you want to record emergency, critical, and error
messages, select Error.
Config Policy Select to configure the events the FortiAnalyzer unit records to the
log.
Allocated Disk
Space (MB) The maximum size of the FortiAnalyzer log file that the FortiAnalyzer
unit saves to the hard disk.
When the log file reaches the specified maximum size, the
FortiAnalyzer unit saves current network traffic log file with an
incremental number and starts a new active log file.
Log options when
log disk is full The policy to follow for saving the current log and starting a new
active log when the FortiAnalyzer disk is full.
Select Overwrite oldest logs to delete the oldest log entry when the
disk is full. Select Do not log to stop logging messages when the disk
is full.