Device Details
|
Vendor |
Fortinet FortiAuthenticator |
|---|---|
|
Device Type |
Protected Network |
|
Supported Model Name/Number |
Fortinet Enterprise |
|
Supported Software Version(s) |
N/A |
|
Collection Method |
Syslog |
|
Configurable Log Output? |
N/A |
|
Log Source Type |
Syslog - Fortinet FortiAuthenticator |
|
Log Processing Policy |
LogRhythm Default |
|
Exceptions |
N/A |
|
Additional Information |
Prerequisites
To access the Fortinet FortiAuthenticator Syslog, you will need one of the following web browsers:
-
Microsoft Internet Explorer 11 or higher
-
Mozilla Firefox
-
Apple Safari
-
Google Chrome
Device Configuration Checklist
For more detailed information on your FortiAuthenticator device, see the following resources:
Currently Supported Log Types
|
Type |
Product Version |
Supported Schema Fields |
|---|---|---|
|
Admin Configuration Messages |
All |
<vmid>, <severity>, <login>, <sip>, <action>, <status>, <tag1>, <subject>, <reason>, <tag2> |
|
Authentication Messages |
All |
<vmid>, <severity>, <login>, <sip>, <action>, <tag3>, <tag1>, <status>, <tag2>, <subject>, <reason>, <object> |
|
System Messages |
All |
<vmid>, <severity>, <tag1>, <login>, <sip>, <action>, <tag2>, <status>, <subject>, <tag3>, <policy> |
|
High Availability Messages |
All |
<vmid>, <severity>, <sip>, <action>, <status>, <subject> |
|
User Portal Messages |
All |
<vmid>, <severity>, <sip>, <action>, <status>, <subject> |
|
Web Service Messages |
All |
<vmid>, <severity>, <sip>, <action>, <status>, <tag1>, <subject> |
|
Catch All |
All |
<severity> |
Parsed Metadata Fields
|
Device Field Name |
LogRhythm Metadata Field |
Value/Data Type |
|---|---|---|
|
Action |
<action> |
Text/String |
|
Level |
<severity> |
Text/String |
|
NAS / IP |
<sip> |
IP Address |
|
N/A |
<policy> |
Text/String |
|
N/A |
<reason> |
Text/String |
|
N/A |
<subject> |
Text/String |
|
Status |
<status> |
Text/String |
|
Typeid |
<vmid> |
Numeric |
|
User |
<login> |
Text/String |