A. Log downloads from the GUI are limited to the current filter view
TRUE, just see it for yourself.
B. Log backups from the CLI cannot be restored to another FortiGate.
TRUE – FortiGate_Security_6.2_Study_Guide-Online.pdf page 306
C. Log backups from the CLI can be configured to upload to FTP as a scheduled time
FALSE. Log backup rolling instead can be scheduled, including upload to FTP server. FortiGate_Security_6.2_Study_Guide-Online.pdf page 307
D. Log downloads from the GUI are stored as LZ4 compressed files.
FALSE. Only from log backups from CLI are LZ4 compressed. FortiGate_Security_6.2_Study_Guide-Online.pdf page 306
Obs.: It is possible to *backup* logs from GUI to USB. See Comment from “JoeDoe”.
I think A&B are correct - The question is about Backing up logs from CLI and Downloading logs from the GUI, therefore, C is incorrect because the question doesn't say anything about uploading logs from CLI, but says backing up from CLI...
A (FG_Sec_6.2_Study_Guide-Online p308) and C (FG_Sec_6.2_Study_Guide-Onlinep307) are correct.
B is not true, see https://docs.fortinet.com/document/fortigate/6.0.0/cli-reference/472076/log-restore
Local disk logs can now be backed up and restored to local files, using CLI commands:
execute log backup <filename>
execute log restore <filename>
Restoring logs will wipe the current log and report content off the disk.
Logs can also now be exported to a USB storage device, as LZ4 compressed files, from both CLI and GUI. When you insert a USB drive into the FortiGate's USB port, the USB menu will appear in the GUI. The menu shows the amount of storage on the USB disk, and the log file size, and you can select Copy to USB to copy the log data to the drive. A&D
Correct answer: A&C. B(You can restore log from CLI to another fortigate. It is a very basic feature). D(Log are store as file_name.log, not compressed LZ4).
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Samanosuke
Highly Voted 5 years, 7 months agoeinstein85
Most Recent 2 years, 1 month agoeinstein85
2 years, 1 month agopetrus28
4 years, 2 months agoSebaAr22
4 years, 3 months agohenzoo
4 years, 4 months agoHish__512
4 years, 5 months agowassimtrabelsi
4 years, 5 months agoramzie
4 years, 6 months agoOCZY
4 years, 7 months agoVlad_R
4 years, 7 months agoQuangLNH
4 years, 7 months agondlgd
4 years, 8 months agogeorgianp
4 years, 9 months agoLevis
4 years, 10 months agoLincDel
4 years, 10 months agoguybrush06
4 years, 6 months agoguybrush06
4 years, 6 months agoMnon2
4 years, 10 months agochameleon_eh
4 years, 10 months agoCtnroger
4 years, 4 months ago