NVR configuration
Page 33
FortiRecorder 2.4.2 Administration Guide
4.
To verify logging connectivity, from FortiRecorder, trigger a log message that matches the
type and severity levels that you have chosen to store on the remote Syslog server or
FortiAnalyzer. Then, on the remote host, confirm that it has received that log message.
If the remote host does
not
receive the log messages, verify the FortiRecorder’s static routes
) and the policies on any intermediary firewalls or routers (they must
allow Syslog traffic from the FortiRecorder network interface that is connected to the
gateway between it and the Syslog server). To determine the point of connectivity failure
along the network path, if the FortiAnalyzer or Syslog server is configured to respond to
Setting name
Description
IP
Type the IP address of a Syslog server or FortiAnalyzer.
Port
Type the UDP port number on which the Syslog server listens for
log messages.
The default is 514.
Level
Select the severity level that a log message must equal or exceed
in order to be recorded to this storage location.
For information about severity levels, see
Caution:
Avoid recording log messages using low severity
thresholds such as
Information
or
Notification
to the local hard disk
for an extended period of time. A low log severity threshold is one
possible cause of frequent logging. Excessive logging frequency
can cause undue wear on the hard disk and may cause premature
failure.
Facility
Select the facility identifier the FortiRecorder will use to identify
itself to the Syslog server if it receives logs from multiple devices.
To easily identify log messages from the FortiRecorder when they
are stored on a remote logging server, enter a unique facility
identifier, and verify that no other network devices use the same
facility identifier.
CSV format
Enable if your Syslog server requires comma-separated values
(CSV).
Note:
Do not enable this option if the remote host is a
FortiAnalyzer. FortiAnalyzer does not support CSV-formatted log
messages.
Logging Policy
Configuration
Select what type of NVR events and camera events you want to
log.
If you will be sending logs to a FortiAnalyzer appliance, you must add the FortiRecorder NVR to
the FortiAnalyzer’s device list, and allocate enough disk space. Otherwise, depending on its
configuration for unknown devices, FortiAnalyzer may ignore the logs. When the allocated disk
space is full, it may drop subsequent logs.
