1. Log in to the FortiGate web interface
2. Select Log & Report > Log Setting or Log & Report > Log Config > Log Setting (depending on the version of FortiGate)
3. If you want to export logs in WELF format:
Select the Log in WebTrends Enhanced Log Format or the WebTrends checkbox (depending on the version of FortiGate)
Enter the IP address of the syslog server
Choose the logging level as Information or select the Log All Events checkbox (depending on the version of FortiGate)
4. If you want to export logs in the syslog format (or export logs to a different configured port):
Select the Log to Remote Host option or Syslog checkbox (depending on the version of FortiGate) Syslog format is preffered over WELF, in order to support vdom in Fortigate firewalls.
Enter the IP address and port of the syslog server
Select the logging level as Information or select the Log All Events checkbox (depending on the version of FortiGate)
Select the facility as local7
5. Click Apply
https://www.manageengine.com/products/firewall/help/configure-fortinet-firewalls.htmllog Fortigate จัดเก็บได้ใน Forticloud syslog โปรแกรมที่รองรับจัดเก็บlog และFortianalyzer น่ะครับ