This article describes the limit of a number of addresses shown in the System events log on v6.2.x
Scope
FortiGate.
Solution
When a large number of addresses are added to an address group in v6.2.x, the logs will be truncated, preventing the full list from being displayed.
Below is an example:
The following system event logs are downloaded by the admin to verify which addresses were added to the address group at a specific time. As shown in the below screenshot, not all of the addresses appear in the logs.
The admin tried to add approximately 100 addresses, but only about half of them are appearing. Note that v6.2.x and v6.4.x are out of engineering support.
A solution for this issue is to upgrade to v7.0.x or v7.2.x:
Below is an example of how logs will look like in v6.4.x onwards, the full list will appear with a continuation sign of ‘[001]’ ‘[002]’
The admin can see the full list of edited addresses.
