Skip to main content
U_shah
Visitor III
June 13, 2024
Question

FortiEMS security Logs to Third Party SIEM

  • June 13, 2024
  • 1 reply
  • 1949 views

Hi,

 

Is there a possibility to send Forticlient logs mostly security and system events that are fetched by FortiEMS to a third party SIEM.Right now, the only option I see is to send FortiEMS Event logs to Syslog. We dont have the SIEM on a public IP and thus require FortiEMS to be the mediator as it already collects these logs for its dashboard.

1 reply

ebilcari
Staff
Staff
June 14, 2024

It seems that FCT EMS cannot be used to forward FCT events via syslog. FortiAnalyzer can serve as a collection point for FCT events and then forward that information to a 3rd party SIEM.

Emirjon
U_shah
U_shahAuthor
Visitor III
June 21, 2024

We dont have a FortiAnalyzer. Sad that there is a dependency on 3rd product.