Tech newbie here.
I want to send Fortigate logs to a syslog server. Previously, I was receiving way too many unnecessary firewall logs, 90% of them with a security level of “notice.” I have used this solution in the CLI to change the level of logs that I receive (so I’m not getting a bunch of useless logs anymore).
The problem is, I do want to keep the logs that tell me when I’ve logged into Fortigate/my system, but since that was labeled as “notice,” I’m not receiving login session logs anymore. Is there anyway for me to configure the security level of login session logs to “warning” so I can receive those (and not the other “notice” logs)? And if so, how?
OR, if there’s another workaround to this problem other than changing the security level of the individual login session log, any tips are welcome!
Please speak in simple terms – I have just started playing with this 🙂
