Syslog - Fortinet FortiAnalyzer

Device Details

Device Name	Syslog - Fortinet FortiAnalyzer
Vendor	Fortinet Enterprise
Device Type	Fortinet FortiAnalyzer Remote Syslog
Supported Model Name/Number	N/A
Supported Software Version	N/A
Collection Method	Syslog
Configurable Log Output	N/A
Log Source Type	Syslog - Fortinet FortiAnalyzer
Log Processing Policy	LogRhythm Default V 2.0
Exceptions	N/A
Additional Information	https://docs.fortinet.com/document/fortimanager/7.2.2/log-message-reference/439316/fortianalyzer-event-log-message-example https://docs.fortinet.com/document/fortimanager/7.2.2/log-message-reference/395380/fortianalyzer-application-log-message-example

Supported Log Messages

(List of LR tags used to parse the log information for each message type)

Type	Product Version	Supported Schema Fields
V 2.0 : FortiAnalyzer Application Event	N/A	<vmid>, <domainorigin>, <object>, <objecttype>, <action>, <severity>, <login>, <subject>, <status>
V 2.0 : FortiAnalyzer Event	N/A	<vmid>, <object>, <objecttype>, <severity>, <login>, <subject>, <action>
V 2.0 : Catch-All	N/A	<severity>, <tag1>

Revision History

KB Version	Log Type	Change Type	Details
KB 7.1.672.0	Syslog - Fortinet FortiAnalyzer	New Log Source Optimization (LSO) policy: LogRhythm Default v2.0	Optimized new log processing policy for Syslog - Fortinet FortiAnalyzer.