FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
caunon
Staff
Staff
Article Id 189914

Description

 

This article describes how to configure FortiAnalyzer to keep Syslog from other third parties or a Syslog from another brand.

 

Scope

 

FortiAnalyzer.

Solution

 

Configure Syslog settings to other units which will send a Syslog to FortiAnalyzer.

 

  1. Check that the ADOM is enabled.

config system global

    get ?


If it is disabled, enable it with this command:

 

set adom-status enable
end

 

 

  1. The device will now be an Unauthorized Device in the root ADOM.

 

 

syslog_unauth.png

 

  1. Authorize the device and move it to the 'Syslog' ADOM or any other Fabric ADOM.

syslog_auth.png

 

  1. Once authorized, syslogs will start being received on FortiAnalyzer.