Skip to main content
Mynno
New Member
February 11, 2025
Solved

Automation > trigger > FortiOS Event log

  • February 11, 2025
  • 1 reply
  • 728 views

Hello,

I would like to know if it is possible to change the AND in the fields to OR because I would like my action to be triggered only if one of the parameters I define is triggered.

Thank you in advance.

 

2025-02-11 14_51_53-FortiGate - FG400F-PA5-1.png

Best answer by funkylicious

Hi,

As far as I know, it cannot be changed.

Field filters defined will look into the Event(s) that you choose above and search of the param log field:value pair that you define and all must match it cannot do one or other.

You could create multiple ones if you need different combinations.

 

https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/950487/fortios-event-log-trigger 

1 reply

funkylicious
SuperUser
SuperUser
February 11, 2025

Hi,

As far as I know, it cannot be changed.

Field filters defined will look into the Event(s) that you choose above and search of the param log field:value pair that you define and all must match it cannot do one or other.

You could create multiple ones if you need different combinations.

 

https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/950487/fortios-event-log-trigger 

"jack of all trades, master of none"
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!