CONNECT IT. LEAVE THE REST TO US.

Three steps to peace of mind.

Half a day of work in an average organisation. You define one syslog target on the FortiGate and the rest runs itself.

1

Point your FortiGate at it

You enter the LogArşiv server address in the device syslog settings. No restart, no interruption to traffic.

config log syslogd setting
  set status enable
  set server "192.168.1.50"
  set port 514
  set facility local7
end
2

It seals at midnight

When the day closes, every record from that day is compressed, signed and added to the chain. Archived days are dropped from the hot database, so the disk does not swell and search stays fast. The FortiGate configuration is backed up at the same hour.

3

It is found when asked for

Recent days come from the database, earlier ones from archive files; both merge into a single result list. Once you find the record, verify its seal with one click and export it.

Specifications

CollectionSyslog UDP 514 and TCP 514 · concurrent · batched writes (2,000 records / 1 s)
Queue200,000 record depth · write halts at 5% free disk
Hot tier3 days by default · searchable instantly from the interface
Archive730 days by default · daily · compressed · 38 bytes per record on average
IntegritySHA-256 day chain · signed seal · optional RFC 3161 timestamp
FortiGate integrationREST API · device status, VPN sessions, web filter · nightly config backup (60 versions)
AuthorisationConfigurable session length · SMS verification · auto re-lock after 15 min · audit trail
ExportCSV (with active filters) · archive file download · verification digest
ServerLinux · Python 3 · 4 GB RAM is enough · no external dependencies · no internet required
InterfaceBrowser · light and dark theme · works on mobile

SMALL FOOTPRINT. LONG MEMORY.

Two years of records.
Less space than you think.

A compressed archive averages 38 bytes per record. If you do not know your daily volume, a rough measure: about a thousand lines per active user per day.

10k1.5M3M

By default the hot tier keeps the last three days in the database, where search returns instantly. Everything older sits in sealed archive files.

Hot tier (3 days)
Sealed archive (730 days)
Configuration backups
Recommended disk

LET US START WITH THE NEXT RECORD

Your records are ready.
Are you?

Explore LogArşiv against your own requirements in thirty minutes.

Book a demo

The product itself. Real scenarios. Technical answers.