Hello,
I am trying to send FortiWeb WAF 2000E logs to Logrhythm SIEM. However, on v6.0.2, i only see SIEM compatibility to ArcSight and Qradar servers.
Any suggestions on connecting my WAF appliances to other SIEMs besides the out-of-box options?
thanks.
Hi,
there are only 3 siem format available on fortiweb, two that you re mentianing and azure format.
Try to use syslog policy. you have there cvs option too.
Logrhythm should be able to parse these logs.
best
AB
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.