Syslog - Fortinet FortiWeb CEF
Device Details
Device Name | Fortinet FortiWeb |
Vendor | Fortinet |
Device Type | Fortiweb |
Supported Model Name/Number | N/A |
Supported Software Version | N/A |
Collection Method | Syslog |
Configurable Log Output | CEF |
Log Source Type | Syslog - Fortinet FortiWeb CEF |
Log Processing Policy | LogRhythm Default V 2.0 |
Exceptions | N/A |
Additional Information | https://docs.fortinet.com/document/fortiweb/7.6.0/log-message-reference |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
Type | Product Version | Supported Schema Fields |
|---|---|---|
Catch All | N/A | <severity>, <tag1> |
Attack Log Messages | N/A | <version>, <vmid>, <tag1>, <vendorinfo>, <severity>, <objecttype>, <action>, <process>, <protname>, <object>, <sip>, <sport>, <dip>, <dport>, <command>, <useragent>, <dname>, <subject> |
Admin Authentication Activity | N/A | <version>, <vmid>, <tag1>, <vendorinfo>, <severity>, <objecttype>, <action>, <result>, <subject> |
Traffic Log Messages | N/A | <version>, <vmid>, <tag1>, <vendorinfo>, <severity>, <objecttype>, <result>, <reason>, <process>, <protname>, <object>, <sip>, <sport>, <dip>, <dport>, <command>, <useragent>, <dname>, <bytesin>, <bytesout>, <subject>, <responsecode> |
Revision History
KB Version | Log Type | Change Type | Details |
|---|---|---|---|
KB 7.1.730.0 | Syslog - Fortinet FortiWeb CEF | New Device Documentation | N/A |