Firepowe management center integration with fortisiem

Hello,

I successfully integrated the FMC from Cisco with the fortisiem platform, but all the logs I received are unkown.

Any suggestion to resolve this issue?

Screenshot 2023-08-25 075339.png

Best answer by FSM_FTNT

Hi, have a look at the attached parser.

If you can provide more sample events, we can improve this parser.

Thanks

Staff

Hi,

Can you provide some more sample events? You can send the to me directly and we will check.

Are these events generated by FTD and forwarded via FMC or are they FMC generated events?

Thanks

Explorer II

The events are generated by the FMC :

Screenshot 2023-08-31 092723.png

Staff

We need the raw log, can you export in CSV and share or post direct to me?

Staff

Hi, have a look at the attached parser.

If you can provide more sample events, we can improve this parser.

Thanks

Explorer II

Thank you for your support

Sign up