# Fortimanager

## FORTIMANAGER 

The FortiManager family delivers the versatility you need to effectively manage your Fortinet- based security infrastructure. 

### TO FORWARD FORTIMANAGER 4.3.X LOGS 

Log in to FortiManager 4.3.x using CLI: 

`config fmsystem locallog syslogd setting` 

`set server <IP address> ##Address of Log Collector`&#x20;

`set severity <emergency | alert | critical | error | warning | notification | information | debug> ##Least severity level to log`&#x20;

`set status <enable | disable>`&#x20;

`set facility <facility> ##Which facility for remote syslog.`&#x20;

`set port <port> ##Port that server listens at`&#x20;

`end`&#x20;

### TO FORWARD FORTIMANAGER 5.0.X UP TO 5.0.6 LOGS&#x20;

Log in to FortiManager 5.0.x up to 5.0.6 using CLI:&#x20;

`config system locallog syslogd setting`&#x20;

`set server <IP address> ##Address of Log Collector`&#x20;

`set severity <emergency | alert | critical | error | warning | notification | information | debug> ##Least severity level to log`&#x20;

`set status <enable | disable>`&#x20;

`set facility <facility> ##Which facility for remote syslog.`&#x20;

`set port <port> ##Port that server listens at.`&#x20;

`End`&#x20;

### TO FORWARD FORTIMANAGER 5.0.7 AND ABOVE VERSION LOGS &#x20;

Log in to FortiManager 5.0.7 using web interface:&#x20;

1\. Go to System Settings > Advanced > Syslog Server&#x20;

![Fortimanager Syslog GUI](https://firebasestorage.googleapis.com/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MMRHZBPHlLDUc8519fX%2Fuploads%2FsKbFtrnEQQDHup1MLp2Y%2Ffile.png?alt=media)

The Syslog server can also be defined using CLI:&#x20;

`config system syslog`&#x20;

`edit <server name>`&#x20;

`set ip <Log Collector-IP>`&#x20;

`end`&#x20;

### Enable sending FortiManager local logs&#x20;

This can only be configured using CLI:&#x20;

`config system locallog syslogd setting`&#x20;

`set syslog-name <Remote syslog server name,defined at previous step>`&#x20;

`set severity <emergency | alert | critical | error | warning | notification | information | debug> ##Least severity level to log`&#x20;

`set status <enable | disable>`&#x20;

`set facility <facility> ##Which facility for remote syslog.`&#x20;

`set port <port> ##Port that server listens at (514)`&#x20;

`end`&#x20;