Skip to main content
AliMhaerFathy
Explorer
July 16, 2025
Solved

MSSQL Custom Application logs - JDBC Integration

  • July 16, 2025
  • 5 replies
  • 983 views

Hello,

Summary:
I have a MSSQL DB, and i have an application which sends its logs to custom tables.

Task:
Can I use the JDBC connection to connect to these custom tables, and retrieve the table's columns, then I create the parser? 
FortiSIEM 

Best answer by AliMhaerFathy

It works! Alhamdullah.

Kindly, follow the instructions below:

1- JDBC.png2- JDBC.png3- JDBC.png4- JDBC.png5- JDBC.png6- JDBC.png7- JDBC.png8- JDBC.png9- JDBC.png

5 replies

adem_netsys
Explorer III
July 16, 2025

Hi @AliMhaerFathy 

While configuring JDBC, you specify the columns you want to get and create a special event type for it. The incoming raw data consists of the columns you created, so you do not need a parser.  My advice would be to create a sql view and use it. After doing these operations, you should not forget to do discovery.

AliMhaerFathy
Explorer
July 16, 2025

Thanks for your support @adem_netsys, it's really appreciated!

Here i can see we put the table name and not specified any columns.

could you elborate further, as it's critical to get this application log?

 

2025-07-16_133446.png

AliMhaerFathy
Explorer
July 17, 2025

I have a need to pull data from a MS_SQL DB from a specific Table with a specific query into FortiSIEM. 
I have read all documentation of "External Systems Configuration Guide"
https://docs.fortinet.com/document/fortisiem/7.0.2/external-systems-configuration-guide/723635/micro...


in the documentation above it doesn't seem like there is an option to pull specific data from a specific table but rather only auditing and monitoring of the DB. 

Does anyone have any suggestion or a guide on how to pull data from an MS_SQL DATABASE
DataBase name : X_DB
Table name: Y_Table

AliMhaerFathy
AliMhaerFathyAuthorAnswer
Explorer
July 19, 2025

It works! Alhamdullah.

Kindly, follow the instructions below:

1- JDBC.png2- JDBC.png3- JDBC.png4- JDBC.png5- JDBC.png6- JDBC.png7- JDBC.png8- JDBC.png9- JDBC.png

AliMhaerFathy
Explorer
July 28, 2025

Hi @adem_netsys 

It works fine, however the OOB JDBC performance monitor disappeared once the custom performance object worked

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!