Skip to main content
AliMhaerFathy
AliMhaerFathy
Explorer
February 23, 2025
Question

WMI/OMI Integration

  • February 23, 2025
  • 1 reply
  • 488 views

Hello,

 

We have followed the WMI/OMI Steps to integrate with FortiSIEM to receive the Security, System, and Application Logs.

we received the Performance logs Only, how we can receive the security logs?

    1 reply

    AliMhaerFathy
    AliMhaerFathyAuthor
    Explorer
    February 23, 2025

    I tried this form Supervisor CLI:
    /opt/phoenix/bin/omic -s /opt/phoenix/config/smb.conf -U 'User%Password' //IP 'SELECT * FROM Win32_NTLogEvent WHERE Logfile = "Security" AND TimeGenerated >= "20240222000000.000000+000"'

    and it retrieved the security logs fine, but the integration couldnt recieve them?

    Terms & ConditionsAccessibility statement