FortiClient Manager : Configuring FortiClient agent settings : Configuring the log settings of a FortiClient agent
 
Configuring the log settings of a FortiClient agent
You can configure logging of different types of events for any or all of the FortiClient services by specifying the log level, log type, log size, and log entry lifetime.
To configure log settings:
1. In the FortiClient Manager, select Client/Group > Client > Managed Client in the navigation pane.
2. In the All Managed Clients list, select the FortiClient agent you want to configure from the Host Name column.
3. From the FortiClient menu, select General > Log Setting.
4. Configure the following settings and select Apply.
Override
The FortiClient agent’s configuration includes those inherited from the group to which the computer belongs.
Selecting override allows you to modify the inherited remote log settings on this FortiClient agent. Deselecting override means that you want to use the remote log settings inherited from the group to which the computer belongs.
See “Adding a FortiClient agent group” and “Configuring settings for client groups”.
Remote Server
Select to save the logs to a remote FortiAnalyzer or syslog server.
 
Server type
Select FortiAnalyzer or SysLog as required.
 
Hostname/IP
Enter the FQDN or IP address of the logging server.
 
Facility
Select the Facility setting as required. Facility is one of the information fields associated with a log message. If each FortiClient installation is configured to use a different facility setting, you can easily determine the source of a FortiClient log message.
 
Log level
Select the minimum severity of message to be logged. You can select Error, Warning or Information. The default is Warning.
Local (Disk)
These settings apply to logging on the FortiClient agent.
 
Log file size (max)
Enter the maximum space allocated to FortiClient logs. The default is 5120 KB. Log entries are overwritten, starting with the oldest, when the maximum log file size is reached.
 
Log level
Select the minimum severity of message to be logged. You can select Error, Warning or Information. The default is Warning.
Enable Custom Field
Enable the following custom log field to be included in all logs from this FortiClient agent. This field can be used in generating reports on the FortiAnalyzer unit.
 
Name
Enter the name of the custom log field.
 
Value
Enter the value of the log field.
5. Select Apply.