Skip to main content
AliHaider
New Member
February 20, 2022
Question

Pull events from sftp directory/path

  • February 20, 2022
  • 2 replies
  • 1012 views

Hello,

is there any guide on how to setup scheduled event pulling from a sftp server directory or path?

currently FortiSIEM is able to log in to the sftp from cli with the provided username and password. 

I can also successfully add credentials from the GUI. However, after this I am a bit lost.
Do i need to create a script and import the daily csv file?
what other ways are possible?

Edit 1: we are running 5.3.1

    2 replies

    SimonMonai
    New Member
    February 22, 2022
    Hi Ali

    What is the reason that you would like to poll the files instead of pushing them in regular intervals? I am thinking of installing the FortiSIEM agent configured to load a specific log file. 

    Regards
    Simon-------------------------------------------
    Original Message:
    Sent: Feb 20, 2022 01:30 AM
    From: Ali Haider
    Subject: Pull events from sftp directory/path

    Hello,

    is there any guide on how to setup scheduled event pulling from a sftp server directory or path?

    currently FortiSIEM is able to log in to the sftp from cli with the provided username and password. 

    I can also successfully add credentials from the GUI. However, after this I am a bit lost.
    Do i need to create a script and import the daily csv file?
    what other ways are possible?

    Edit 1: we are running 5.3.1

    FSM_FTNT
    Staff
    Staff
    February 23, 2022
    Hi Ali,

    Which integration are you trying to use?

    Thanks


    ------------------------------
    Daniel
    FortiSIEM Product Manager
    ------------------------------
    -------------------------------------------
    Original Message:
    Sent: Feb 20, 2022 01:30 AM
    From: Ali Haider
    Subject: Pull events from sftp directory/path

    Hello,

    is there any guide on how to setup scheduled event pulling from a sftp server directory or path?

    currently FortiSIEM is able to log in to the sftp from cli with the provided username and password. 

    I can also successfully add credentials from the GUI. However, after this I am a bit lost.
    Do i need to create a script and import the daily csv file?
    what other ways are possible?

    Edit 1: we are running 5.3.1