Chapter 13 Logging and Reporting : Logging and reporting for large networks : Modifying default log device settings : Modifying multiple FortiGate units’ system memory default settings
  
Modifying multiple FortiGate units’ system memory default settings
When the FortiGate unit’s default log device is its system memory, you can modify it to fit your log network topology. In this topic, the following is an example of how you can modify these default settings.
To modify the default system memory settings
1. Log in to the CLI.
2. Enter the following command syntax to modify the logging settings:
config log memory setting
set ips-archive disable
set status enable
end
3. Enter the following command syntax to modify the FortiGate features that are enabled for logging:
config log memory filter
set attack enable
set forward-traffic enable
set local-traffic enable
set netscan enable
set email-log-imap enable
set multicast-traffic enable
set scanerror enable
set app-ctrl enable
end
4. Repeat steps 2 and 3 for the other FortiGate units.
5. Test the modified settings using the procedure “To test sending logs to the log device”.