Fortigate show log. Refer to Local Log -> Enable Disk.

Fortigate show log forticloud. Select Log & Report to expand the menu. Etc Oct 2, 2019 · v7. info; not available for NVME disk diagnose sys logdisk usage <-- Show log disk stats. Sep 20, 2023 · This article describes how to check when the crash log is full. 0 0. Delete filtered logs. set status enable. tail: Print the tail of specified log, and continue to output appended data as the file grows. Select General System Events. Mar 27, 2020 · FortiGate can display logs from a variety of sources depending on logging configuration and model. If it is necessary to customize the port or protocol or set the Syslog from the CLI below are the commands: config log syslogd setting . Solution Reviewing failed login attempts is critical in safeguarding the device's security posture. Select Log Settings. The Log Time field is the same for the same log among all log devices, but the Date and Time might differ. tomcat-log: Initialization Log from Tomcat. For information on using the CLI, see the FortiOS 7. A log message records the traffic passing through FortiGate to your network and the action FortiGate takes when it scans the traffic. Check the conn-timeout setting as this will impact on the logs from FortiAnalyzer. View the SSL-VPN user logged in to FortiGate. 4. Nov 24, 2005 · It is possible to perform a log entry test from the FortiGate CLI using the 'diag log test' command. , If a FortiGate has a log disk, it can be enabled or disabled by GUI or CLI according to the logging requirement : Enable Disk logging from Web GUI: Log into FortiGate. 5 0. 0. log'. In addition to execute and config commands, show , get , and diagnose commands are recorded in the system event logs. g link status) via CLI There are times when it is required to check interface link status via the command line interface (CLI) only. Enter the Syslog Collector IP address. Solution. FortiOS CLI reference. log For example, forward traffic logs downloaded from FortiAnalyzer will be 'fortianalyzer-traffic-forward-2025_01_01. 0 to 6. New entries will be no longer generated. config log memory setting. To enable the CLI audit log option: # config system global set cli-audit-log enable end To view system event logs from GUI: - Go to Log & Report -> Events -> System Events. edit <profile-name> set log-all-url enable set extended-log enable end Epoch time the log was triggered by FortiGate. Thanks, I was also looking at Log View. Choose the desired number between 5-1000 viewed lines. A. end. This topic provides steps for using execute log backup or dumping log messages to a USB drive. end . FGT100D_PELNYC # execute log filter device Available devices: 0: memory 1: fortianalyzer 2: fortianalyzer-cloud 3: forticloud . The type and frequency of log messages you intend to save determines the type of log storage to use. localhost-log: Localhost log from Tomcat. Logging to FortiAnalyzer stores the logs and provides log analysis. Related articles: Technical Tip: How to check Admin Login attempts to FortiGate using FortiAnalyzer for all Feb 24, 2010 · diagnose sys logdisk smart <-- Display log disk status diagnose sys logdisk status <-- Show log disk S. Oct 4, 2022 · Nominate a Forum Post for Knowledge Article Creation. , Displaying the Audit Log using the CLI On FortiGate, FortiManager must be connected as central management in the security Fabric. Example: FGT # execute log filter field date "2014-12-25" FGT # execute log display 402 logs found. Clicking on a peak in the line chart will display the specific event count for the selected severity level. Please ensure your nomination includes a solution within the reply. SolutionRun the following commands to filter and show the logs from destination port 8001: # execute log filter reset# ex Jun 2, 2016 · FortiGate-5000 / 6000 / 7000; All event log subtypes are available from the event log subtype dropdown list on the Log & Report > Events page. For more information about raw logs of other devices, see the Log Message Reference for the platform type. Scope The example and procedure that follow are given for FortiOS 4. 2 Administration Guide, which contains information such as: Oct 28, 2014 · On FAZ, pls enter "FortiView" tab and in left tree, there has "Log View" section in bottom, enter "Log View", then choose a log type, for example, traffic log, then in right side, there has a "Tools", button, click and you will see "Real-Time Log" function . 1. The maximum The time frame available is dependent on the source: Logs sourced from FortiAnalyzer, FortiGate Cloud, and FortiAnalyzer Cloud have the same time frame options as FortiView (5 minutes, 1 hour, 24 hours, or 7 days). Technical Tip: Rebuilding an HA cluster server. It would be advisable to perform a backup of the logs by running the following command on the CLI of the device. This is accomplishe. 2. show vpn ipsec phase2-interface. Traffic Logs > Forward Traffic Feb 25, 2025 · FortiGate, FortiAIOps. how to check interface information (e. config log memory filter. execute log display . To view real-time logs, in the log message list view toolbar, click Tools > Real-time Log. For example: config sys sdwan (sdwan) # config Run the command in the CLI (# show log fortianalyzer setting). The FortiOS integrates a script that executes a series of diagnostic commands that take a snapshot of the current state of the device. 16. Scope FortiGate. This topic provides a sample raw log for each subtype and the configuration requirements. System Events log page. The output can be saved to a log file and reviewed when Jan 20, 2025 · the steps to enable OSPF logs and change level for showing information in router logs in the GUI. - In the log location dropdown, select Run the command in the CLI (# show log fortianalyzer setting). exec log display. diag sys top 1 10 Run Time: 89 days, 15 hours and 11 minutes 0U, 46N, 5S, 4I, 44WA, 1HI, 0SI, 0ST; 24140T, 11438F log_se 11066 R N 38. Logging with syslog only stores the log messages. Via CLI: Test-LAB # diagnose ip router ospf showOSPF debugging status:OSPF debugging level is Apr 17, 2023 · FortigateのログをCLIベースで確認したいとき Forigateをリプレイスした際に特定のサービスが通信不可になる現象が発生した際、ポリシー許可はされているがログでdenyログが無いか確認したかったので以下を参考にしながらCLIコマンドでログを出力した。 Dec 4, 2024 · This article describes how to view logs sent from the local FortiGate to the FortiGate Cloud. Local Logs What is the difference between: diag debug crashlog get. 26:514 oftp status: established Debug zone info: Server IP: 172. Select ' Apply'. Log Generation (Which events should be logged): FortiGate converts events into logs according to system, security profile, and firewall policy configuration. The cli-audit-log option records the execution of CLI commands in system event logs (log ID 44548). This can be performed either by FTP May 8, 2020 · This article provides the solution to get a log with a complete URL in 'Web Filter Logs'. 1 1 Jun 28, 2022 · This article describes how to view the actual client IP details in the FortiGate logs when the FortiGate receives traffic from a proxy device connected to its LAN segment. This will create various test log entries on the unit hard drive, to a configured Syslog server, to a FortiAnalyzer dev Sep 22, 2009 · how to view log entries from the FortiGate CLI. Jan 23, 2025 · In this article, we will delve deep into the process of checking logs in a FortiGate firewall, covering various aspects including the types of logs, how to access them, filtering options, and best practices for log management. For this reason, unknown domain names will be shown in Forward Traffic logs. In the above screenshot, the log location is set to the disk, s Jun 2, 2016 · Logging records the traffic that passes through, starts from, or ends on the FortiGate, and records the actions the FortiGate took during the traffic scanning process. T. FortiNet support repeatedly asks for the output of "diag debug crashlog read" however on the affected system the only option is "diag debug crashlog get" and they ignore the output when I provide it. So Dec 9, 2015 · FGT# execute log filter field date From 1 to 10 values can be specified. Settings available in the Global Settings tab include: Dec 4, 2017 · Log traffic must be enabled in firewall policies: Check the log settings and select from the following: resolve-ip Add resolved domain name into traffic log if possible. FortiGate event logs includes System, Router, VPN, User, and WiFi menu objects to provide you with more granularity when viewing and searching log data. Click Formatted Log to view them in the formatted into a table The Audit Log displays all user activity performed on the appliance. 1 11 log_se 11072 D N 37. 6. Mar 14, 2025 · The maximum number of rows that can be viewed or displayed and exported at a time is 2000 when logging in to the FortiCloud portal. Once the SSL-VPN users have connected to the FortiGate via the SSL-VPN, you can view their login activities from inside FortiGate. The available storage space on the FortiGate 61F serves as an example, as each FortiGate comes with a different storage capacity. 95. FortiGate supports sending all log types to several log devices, including FortiAnalyzer, FortiAnalyzer Cloud, FortiGate Cloud, and syslog servers. Custom View and Chart Builder are only available in historical log view. mode. Download the event logs in either CSV or the normal format to the management computer. In Web filter CLI make settings as below: config webfilter profile. Viewing event logs. Maximum length: 127. Log backup to the USB disk has been removed afterward. Download. resolve-port Add resolved service name into traffic log if possible. To display the logs: # execute log filter device disk # execute log filter category event # execute log filter field subtype system # execute log filter field logid 0100044548 Log Forwarding After Restoration: When FortiAnalyzer connectivity is restored, miglogd automatically starts sending cached logs to FortiAnalyzer. May 10, 2023 · $ show full-configuration log memory filter ※Severityとは、重大度を示すものでトラフィックがユーザーに与える影響の重大度をレベルで表しています。コマンドを実行し、「set severity」の項目を確認します。 Feb 3, 2024 · FortiGate # execute log filter reset FortiGate # execute log filter category 3 FortiGate # execute log filter free-style "srcip 10. g ( assume memory log is the source if not set the source ) execute log filter category 1. Please refer to the reference screenshots below. If the memory log buffer is full, logs can be temporarily stored on disk until FortiAnalyzer becomes available. fortidb-log: Log of FortiDB Application Server. To display the logs: # execute log filter device disk Feb 2, 2025 · FortiGate でコンフィグを表示するには「show」 Cisco IOS などではコンフィグを表示したい場合、show running-config などを利用します。しかし、FortiGate では show コマンドを利用します。このメモでは FortiGate でコンフィグを表示する方法を整理してメモしておきます。 System Events log page. Scope. M. On the main menu, click Monitor > SSL-VPN Monitor. to set the source . Solution: Visit login. Solution: Go to the Log & Report tab -> Settings -> Local logs. 1: date=2020-11-13 time=21:28:16 eventtime=1605270495993591440 Dec 16, 2019 · how to perform a syslog/log test and check the resulting log entries. The Log & Archive Access menu displays the archived logs only when archiving is enabl Fortisacloud_backup # config log disk setting Fortisacloud_backup (setting) # show full config log disk setting set status enable set ips-archive enable set max-policy-packet-capture-size 100 set log-quota 0 set dlp-archive-quota 0 set report-quota 0 set maximum-log-age 7 set upload disable set full-first-warning-threshold 75 set full-second Log settings. HO_t3emealab # exe log display 29 logs found. FortiGate v. Navigate to Log & Report Settings: In the GUI, go to “Log & Report” > “Log Settings”. This document describes FortiOS 7. The log viewer can be filtered with a custom range or with specific time frames. SolutionPerform a log entry test from the FortiGate CLI is possible using the 'diag log test' command. It includes memory, disk (in models that have a disk), FortiAnalyzer (or FortiManager with Analyzer features enabled), and FortiGate Cloud. Importance: Auditing admin logs in FortiGate is of prime importance for several reasons: Security: Ensuring only authorized changes are made. Raw Log / Formatted Log. This will create various test log entries on the unit's hard drive, to a configured Syslog server, to a FortiAnalyzer device, to a WebTrends device, or to the unit's System Dashboard ( System - > Status ). Select Apply. Dec 10, 2024 · how to show and resolve hostnames in forward traffic log. 1, the 'diagnose vpn ike log-filter src-addr4' command has been changed to 'diagnose vpn ike log filter loc-addr4'. Dec 26, 2023 · log 一般存放在 Fortigate 自己的硬碟，並且只保留 7 天，如果要對 log 做更多的處理，可考慮購買 analyzer 或是雲端空間，也可自建 log 收集軟體自行 After this information is recorded in a log message, it is stored in a log file that is stored on a log device (a central storage location for log messages). On the FortiGate, to get more logs, the log location is 'FortiGate Cloud' on the right corner of WebUI, under Log & Report -> Forward Traffic. I have been working on diagnosing an strange problem. Logging VPN events. Solution . Go to Log & Report > Log Settings. For information about how to interpret log messages, see the FortiGate Log Message Reference. Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Log & Report -> Forward Traffic: SD-WAN Internet Service: This column shows the name of the internet service used for the traffic flow. Note: A log message records the traffic passing through FortiGate to your network and the action FortiGate takes when it scans the traffic. Each value can be a individual value or a value range. execute log filter field action login. See System Events log page for more information. diagnose debug enable. Add a filter for Action = Login. When a log issue is caused by a particular log message, it is very helpful to get logs from that FortiGate Backing up full logs using execute log backup. To display the logs: # execute log filter device disk # execute log filter category event # execute log filter field subtype system # execute log filter field logid 0100044548 May 29, 2020 · FortiOS 5. Thanks . The historic logs for users connected through SSL VPN can be viewed under a different location depending on the FortiGate version: Log & Report -> VPN Events in v6. See Event log filtering. By default, the FortiGate will only log the IPs and not resolve them to their corresponding domains, so the URL is not visible in the logs. Logs can be filtered by date and time in the Log & Report > System Events page. The time frame available is dependent on the source: Logs sourced from FortiAnalyzer, FortiGate Cloud, and FortiAnalyzer Cloud have the same time frame options as FortiView (5 minutes, 1 hour, 24 hours, or 7 days). set local-traffic enable. 6 and lower, the logging location is set from the GUI under Log&Report -> Log Settings, or from CLI: Displaying the System Log using the GUI. However, it is advised to instead define a filter providing the necessary logs and that the command above should return. Not all of the Jan 30, 2025 · If FortiAnalyzer logs are visible but are not downloading on the FortiGate, run the following command: execute log fortianalyzer test-connectivity . Network layout: Mar 27, 2022 · Fortigateでは、内部で出力されるログを外部のSyslogサーバへ送信することができます。Foritigate内部では、大量のログを貯めることができず、また、ローエンド製品では、メモリ上のみへのログ保存である場合もあり、ログ関連は外部 Sep 30, 2021 · how to resolve an issue where local traffic logs are not visible under Logs & Reports and the page shows the message 'No results'. Not all of the event log subtypes are available by default. If it is needed to view more lines or query more lines on CLI the following command can be set: execute log filter view-lines <number> -> Number of lines to view (5 - 1000). Run the command 'diagnose debug crash log read' and check the Max crash log line number and number lines. Jun 2, 2016 · diagnose test application miglogd 20 FGT-B-LOG# diagnose test application miglogd 20 Home log server: Address: 172. For IPsec VPNs, Phase 1 and Phase 2 authentication and encryption events are logged. Solution Use the command indicated in the related document to list the FortiGate& FortiGateの設計・設定方法を詳しく書いたサイトです。 FortiGateの基本機能であるFW（ファイアウォール）、IPsec、SSL‐VPN（リモートアクセス）だけでなく、次世代FWとしての機能、セキュリティ機能（アンチウイルス、Webフィルタリング、SPAM対策）、さらにはHA,可視化、レポート設定までも記載し Feb 13, 2021 · 今回はFortiGateでトラフィックログを表示させる方法をご紹介します。トラフィックログとは FortiGateではIPv4ポリシーなどで許可・拒否した通信のログである、トラフィックログをロギングすることができます。 May 1, 2013 · show: Show the specified log. Aug 10, 2024 · Log into the FortiGate. Aug 1, 2023 · execute log display . When viewing event logs in the Logs tab, use the event log subtype dropdown list on the to navigate between event log types. In the GUI, Log & Report > Log Settings provides the settings for local and remote logging. Scope: FortiGate Cloud, FortiGate. For value range, "-" is used to separate two values. 1 3 log_se 11000 D N 37. Log & Report > Log Settings is organized into tabs: Global Settings. 2 CLI commands used to configure and manage a FortiGate unit from the command line interface (CLI). Related articles: Technical Tip: Procedure for HA manual synchronization. Start real-time debugging of logging process miglogd. 10 logs returned. remove: Remove the specified log. Apr 10, 2017 · This article describes how to display logs through the CLI. execute log fortianalyzer test-connectivity. Scope FortiGate interface management. Any unauthorized or suspicious Sep 28, 2016 · Collect the FortiGate’s HA and System EVENT logs for both units downloaded from the GUI/FortiAnalyzer or syslog (remote) server. 5 logs returned. FortiGate is handling pass-through traffic, FortiGate is not acting as the proxy. In this example, the primary DNS server was changed on the FortiGate by the admin user. Archived logs are stored on FortiAnalyzer units, a FortiGate unit’s local disk or system memory, and a FortiGuard Analysis server. 92:514 Alternative log server: Address: 172. 4: Select from the drop-down to download or view: The downloaded file name will be in the format of log source-type-subtype-date. After this information is recorded in a log message, it is stored in a log file that is stored on a log device (a central storage location for log messages). Sep 20, 2023 · To audit these logs: Log & Report -> System Events -> select General System Events. This article describes this feature. Epoch time the log was triggered by FortiGate. In this example, the local FortiGate has the following configuration under Log & Report -> Log Settings. Mar 11, 2015 · how to resolve an issue where the forward traffic log is not showing any data even though logging is turned on in the FortiGate. Address of remote syslog server. 1 10 log_se 10998 D N 37. FortiGate. I know also that I can get what I would understand to be NON DEFAULT settings for given sections of the config from commands such as the following (this is by no means of course an exhaustive list): show system interface. diagnose debug crashlog read Set log filters. Verify that the VPN activity event option is selected Run the command in the CLI (# show log fortianalyzer setting). To review the storage capacity from CLI: Nov 7, 2016 · To filter log and investigate the entries is important to get information that permit to resolve or realize troubleshooting by CLI. log-user-in-upper Enable/disable collect log with user-in-upper. Solution For the forward traffic log to show data, the option 'logtraffic start' must be enabled from the policy itself. Solution Identify exactly where logs are displayed from in the unit. You should log as much information as possible when you first configure FortiOS. x. The following screen shot shows one of the SSL-VPN users logged into the FortiGate. Go to Log & Report > System Events. execute log delete. how to find the failed login attempts to firewall login and SSL VPN login. Sep 24, 2024 · FortiGateでのFortiAnalyzer接続設定: FortiGateの「Log & Report」設定に移動し、FortiAnalyzerサーバーのIPアドレスを入力して接続を確立します。 FortiAnalyzerでのログ解析 : FortiAnalyzerでログを解析し、インシデントの詳細を掘り下げて調査することができます。 To switch back to formatted log view, click Tools > Formatted Log. Log settings can be configured in the GUI and CLI. R. For more information about FortiGate raw logs, see the FortiGate Log Message Reference in the Fortinet Document Library. Remote syslog logging over UDP/Reliable TCP. And to check the crashlog with only the specific date to focus on. To enable the CLI audit log option: config system global set cli-audit-log enable end To view system event logs in the GUI: Run the command in the CLI (# show log fortianalyzer setting). Repeated login failures This article describes how to check FortiGate upgrade events in system event logs. Log & Report -> Events and select 'VPN Events' in 6. execute log filter. string. option-udp Feb 26, 2025 · Log_se process may go high as below. com in browser and login to FortiGate Cloud. x; Log & Report -> System Events and select 'VPN Events' in 7. Refer to Local Log -> Enable Disk. exe log filter reset exe log filter device 0 exe log filter category 1 exe log filter field action perf-stats exe log filter field date 2024-12-19 exe log filter field time 10:00:00-23:58:59 exe log filter view-lines 5 exe log display . show router bgp. Click on Raw Log to view the logs in their raw state. Scope . Select the log entry and click Details. and. If FortiGate logs are too large, you can turn off or scale back the logging for features that are not in use. All event log subtypes are available from the introductory screen and the event log subtype dropdown list on the Log & Report > Events page. Solution: It is possible to filter the log to check when FortiGate is getting upgraded. 1 3 log_se 11003 D N 37. Jan 22, 2025 · Confirm that the server can receive incoming log messages on the appropriate port (usually UDP or TCP port 514). 1 8 log_se 11061 R N 37. Event log subtypes are available on the Log & Report > System Events page. From GUI, go to Logs & Reports -> System Events -> General System Events -> Add Filter -> Filter Field: Log Description = Device rebooted. edit <Performance SLA Name> set sla-fail-log-period <x> set sla-pass-log-period <y> next. IPsec troubleshooting scenario : A troubleshooting scenario where the following debugs were done but no relevance was seen for the tunnel seen as 'inactive': After this information is recorded in a log message, it is stored in a log file that is stored on a log device (a central storage location for log messages). 25" FortiGate # execute log display 187 logs found. diag debug crashlog read . The Log & Report > System Events page includes: A Summary tab that displays the top five most frequent events in each type of event log and a line chart to show aggregated events by each severity level. set status enable . 0: v7. 0MR1. The logs displayed on your FortiAnalyzer depends on the device type logging to it and the enabled features. config health-check. SolutionIt is assumed that Memory and/or Disk/Faz/FDS logging is enabled on the FortiGate and other log options enabled (at Protection Profile level for example). 1 14 log_se 11075 D N 37. Setup filte Aug 16, 2019 · FortiGateのCLIによるログ確認方法について触ってただけではよくわからなかったので、調べた内容を備忘録。まず、ログの保存先やカテゴリを選定してから、表示させます。・ログ保存先の選定 # execute log filter Mar 31, 2021 · The 'cli-audit-log' data can be recorded on memory or disk, and can be uploaded to FortiAnalyzer, FortiGate Cloud, or a syslog server. Test connectivity between FortiGate and FortiAnalyzer. This applies to 1-year log retention subscription as well. Nov 21, 2023 · show full-configuration. show vpn ipsec phase1-interface. 2 and v7. Solution By default, logs for OSPF are disabled and only critical events can be showed. However, the logs shown are usually restricted to only 10 lines. To switch back to historical log view, click Tools > Historical Log. Scope: FortiGate. Log settings determine what information is recorded in logs, where the logs are stored, and how often storage occurs. Log into Fortigate Firewall: Use the web interface or CLI to log into your Fortigate device. Scope FortiOS. You can configure the FortiGate unit to log VPN events. 92 Server port: 514 Server status: up Log quota: 102400MB Log used: 673MB Daily volume: 20480MB FDS arch Oct 25, 2019 · Starting from FortiOS v7. diagnose debug application miglogd -1. x and 7. Go to Log & Report -> System Events; Define time range. Sample logs by log type. Displaying the Audit Log using the GUI . If a Security Fabric is established, you can create rules to trigger actions based on the logs. Log messages and log archives can be viewed from the Log & Archive Access menu. Make sure that deep inspection is enabled on policy. It will show the FortiManager certificate prompt page and accept the certificate verification. For example, if you want to log traffic and content logs, you need to configure the unit to log to a syslog server. To display the logs: # execute log filter device disk # execute log filter category event # execute log filter field subtype system # execute log filter field logid 0100044548 Dec 5, 2017 · how the execute TAC report command can be used to collect diagnostic information about a FortiGate issue. ScopeFortiGate. Oct 23, 2024 · This article describes how to check admin logging attempts on Fortigate using its Disk as a storage if it is available. 1. end <sla-fail-log-period> Enter an integer value from <0> to <3600> <----- Log frequency in seconds. Enable SD-WAN columns to view SD-WAN-related information. Configuration on FortiGate: Go on Security Fabric -> Loggin&Analytics -> FortiAnalyzer -> Enable Status-> Enter FortiManager IP address as server and select 'OK;. Log in to the FortiGate. Solution: Here is the config example: config sys sdwan. For example, sending an email if the FortiGate configuration is changed, or running a CLI script if a host is compromised. Show filtered logs. Toggle Send Logs to Syslog to Enabled. Go to Log & Report -> Log Settings menu (if Virtual Domain is Enabled, set it under each VDOM). In v5. Filter the event log list based on the log level, user, sub type, or message. Dec 2, 2024 · This article explains the steps to check the log storage and capacity of the FortiGate. Apr 13, 2017 · FortiGate with SSL VPN. In general, whether FortiGate should log an event follows the following sequence. To display log records, use the following command: execute log display. value1 [value2 value10] [not] Use not to reverse the condition. Your log should look similar to the below; Jul 2, 2010 · Log settings determine what information is recorded in logs, where the logs are stored, and how often storage occurs. Simon . By default, Log View displays historical logs. FortiGate Devices with SSD: FortiGate devices with an SSD have a configurable log buffer. The FortiProxy system disk is unable to log traffic and content logs because of their frequency and large file size. 0 or higher. This helps the organization identify brute-force attacks to avoid account lockouts. Set log filters. Aug 26, 2020 · e. Show log filters. The logs only show traffic passing through FortiGate and may not provide a complete SD-WAN view. If you convert the epoch time to human readable time, it might not match the Date and Time in the header owing to a small delay between the time the log was triggered and recorded. If passing and there issome issue on FortiGate, run the below commands on FortiGate: get log fortianalyzer setting . mrh jng hzdqjr lyf ftwne wnl duvkps aancpk ilxtnt nkf mgev rbby jjbnuue oewwfkb zojnzji