Hello, From FortiWEB 5.4 to 5.8 the CEF logs has been changed. The
FortiWEB is sending the destination hostname with " in the field, this
is not supposed to be done that way because then arcsight doesnt
eliminate the " from the hostname. Another issu...
I should ask my customer to open a ticket, he's doing it already , lets
see the answer.I was open to see someone from fortinet replying because
this is impacted many more customer.
