By default on Fortigate units with hard drives logs are only uploaded once a day. Units without a hard drive upload in realtime by default.
If you would like a hard drive equipped Fortigate to upload logs in Realtime use the following commands:
# config log FortiAnalyzer setting
#set upload-option realtime
#end
Full Fortinet KB article is here
Leave a Reply