Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
dventura
New Contributor

Logrhythm SIEM integration

Hello,

 

I am trying to send FortiWeb WAF 2000E logs to Logrhythm SIEM. However, on v6.0.2, i only see SIEM compatibility to ArcSight and Qradar servers.

 

Any suggestions on connecting my WAF appliances to other SIEMs besides the out-of-box options?

 

thanks.

1 REPLY 1
AlbTR
New Contributor

Hi,

there are only 3 siem format available on fortiweb, two that you re mentianing and azure format.

Try to use syslog policy. you have there cvs option too.

Logrhythm should be able to parse these logs.

 

best

AB

Labels
Top Kudoed Authors