fortigate logs

 Run Book for Level 1 Engineer:

Checking Logs on Fortigate Firewall using Fortitracker and CLI

1. Open Fortitracker:

• Log in to the Fortitracker web interface by entering the firewall's IP address in a web browser.
• Use the default username and password (admin/admin) to log in.

2. Check Logs using Fortitracker:

• Once logged in, navigate to the "Logs" tab on the top menu.
• Select the desired log type (e.g., system, traffic, VPN, etc.) from the drop-down menu.
• Use the filters to narrow down the logs to the specific information you are looking for.
• Review the logs to identify any issues or security concerns.

3. Check Logs using CLI:

• Open a terminal and SSH into the firewall using the firewall's IP address, username, and password.
• Use the following command to check the system logs: "get system log"
• Use the following command to check the traffic logs: "get firewall log"
• Use the following command to check the VPN logs: "get vpn log"
• Use the "grep" command to filter the logs based on specific keywords or phrases.
• Review the logs to identify any issues or security concerns.