Chapter 13 Logging and Reporting : Logging and reporting for large networks : Modifying default log device settings : Modifying multiple FortiGate units’ hard disk default log settings
  
Modifying multiple FortiGate units’ hard disk default log settings
You will have to modify each FortiGate unit’s hard disk default log settings. The following is an example of how to modify these default settings.
To modify the default hard disk settings
1. Log in to the CLI.
2. Enter the following command syntax to modify the logging settings:
config log disk setting
set ips-archive disable
set status enable
set max-log-file-size 1000
set storage Internal
set log-quota 100
set report-quota 100
set sql-max-size 10000
set sql-max-size-action overwrite
set sql-oldest-entry 1024
set rows-per-transaction 100
set ms-per-transaction 6000
config sql-logging
set netscan disable
set spam disable
end
3. In the CLI, enter the following to disable certain event log messages that you do not want logged:
config log disk filter
set discovery disable
set email-log-imap disable
end
4. Repeat the steps 2 to 4 for the other FortiGate units.
5. Test the modified settings using the procedure “To test sending logs to the log device”.