Device Details
|
Device Name |
Fortinet FortiWeb |
|
Vendor |
Fortinet |
|
Device Type |
Fortiweb |
|
Supported Model Name/Number |
N/A |
|
Supported Software Version |
N/A |
|
Collection Method |
Syslog |
|
Configurable Log Output |
CEF |
|
Log Source Type |
Syslog - Fortinet FortiWeb CEF |
|
Log Processing Policy |
LogRhythm Default V 2.0 |
|
Exceptions |
N/A |
|
Additional Information |
https://docs.fortinet.com/document/fortiweb/7.6.0/log-message-reference |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
|
Type |
Product Version |
Supported Schema Fields |
|---|---|---|
|
Catch All |
N/A |
<severity>, <tag1> |
|
Attack Log Messages |
N/A |
<version>, <vmid>, <tag1>, <vendorinfo>, <severity>, <objecttype>, <action>, <process>, <protname>, <object>, <sip>, <sport>, <dip>, <dport>, <command>, <useragent>, <dname>, <subject> |
|
Admin Authentication Activity |
N/A |
<version>, <vmid>, <tag1>, <vendorinfo>, <severity>, <objecttype>, <action>, <result>, <subject> |
|
Traffic Log Messages |
N/A |
<version>, <vmid>, <tag1>, <vendorinfo>, <severity>, <objecttype>, <result>, <reason>, <process>, <protname>, <object>, <sip>, <sport>, <dip>, <dport>, <command>, <useragent>, <dname>, <bytesin>, <bytesout>, <subject>, <responsecode> |
Revision History
|
KB Version |
Log Type |
Change Type |
Details |
|---|---|---|---|
|
KB 7.1.730.0 |
Syslog - Fortinet FortiWeb CEF |
New Device Documentation |
N/A |