Customizable Syslog CEF output/format for Fortigate's?

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.

Thanks,

To customize the syslog CEF output/format for FortiGate, you can configure the syslog settings to send log messages in CEF format.

1. Access the CLI: Log in to your FortiGate device using the CLI.
2. Configure Syslog Settings: Enter the syslog configuration mode:

config log syslogd setting

Set the format to CEF:

set format cef 

End the configuration: 

end

Additional Configuration: You can configure other syslog settings independently of the log message format, such as the server address and transport protocol (UDP or TCP). - Filtering can also be configured for both CEF and CSV formatted log messages.

Verify Configuration: To confirm the current format used to send Syslog messages, use the following command: 

show full-configuration log syslogd setting | grep -i format

Hi Anthony,
I was looking for same configuration to customize the output of the Logs that send to SIEM, so we could trim the log size and have a better size of logs ingestion to the SIEM
For reference that Palo Alto PAN-OS could customize the the Log Format before send to SIEM, attached the PAN-OS Configuration Menu

Is there any way out to the same on Fortigate?