Technical Tip: How to integrate FortiDLP Cloud and FortiAnalyzer Cloud via Webhook

The both product, FortiAnalyzer Cloud and FortiDLP Cloud, can be integrate different accounts under the Support portal. The reason for using Webhook (API CALL) for FortiDLP Cloud is to send a log to FortiAnalyzer Cloud.

1. Generate a token for FortiDLP Cloud.

2. Insert FortiAnalyzer Cloud URL at the FortiDLP webhook.

    

   

    

   The headers are Authorization FortiAnalyzer token.

   Select Test for testing the Webhook.

    

    

3. FortiAnalyzer Cloud -> Event Monitor -> The FortiAnalyzer showed the log.

    

   

    

    

4. Log Parsers should display the FortiDLP log.

    

   

    

    

5. Enable API log event logs from FortiAnalyzer:

    

config system global

    set jsonapi-log all

end