Chapter 13 Logging and Reporting : Logging and reporting for large networks : Modifying default log device settings : Modifying multiple FortiGate units’ hard disk default log settings
  
Modifying multiple FortiGate units’ hard disk default log settings
You will have to modify each FortiGate unit’s hard disk default log settings. The following is an example of how to modify these default settings.
To modify the default hard disk settings
1. Log in to the CLI.
2. Enter the following command syntax to modify the logging settings:
config log disk setting
set ips-archive disable
set status enable
set max-log-file-size 1000
set storage Internal
set log-quota 100
set report-quota 100
end
3. In the CLI, enter the following to disable certain event log messages that you do not want logged:
config log disk filter
set sniffer-traffic disable
set local-traffic enable
end
4. Repeat the steps 2 to 4 for the other FortiGate units.
5. Test the modified settings using the procedure “To test sending logs to the log device”.