Skip to main content
simosghi
New Member
July 12, 2016
Question

Fortigate & PRTG as syslog server

  • July 12, 2016
  • 2 replies
  • 10557 views

Hi everyone,

Has someone tried to configure fortiOS 5.4.1 to send syslog messages to PRTG syslog server?

Could you give me the configuration step?

Thank's

    2 replies

    Jeff_FTNT
    Staff
    Staff
    July 14, 2016

    On FGT side, you may set up like:

    config log syslogd setting     set status enable     set server "x.x.x.x"  ----PRTG server ip end

    Malik
    New Member
    May 16, 2017

    Hi, I can give you an what i did until now!

     

    Fortigate Side:

    SNMP TRAP RECEIVER:

    1) in system->snmp  Under snmp v1/v2 select Create new Or Edit (your existing)

    2) select your community name (must much with the prtg community)

    3) enter the IP address and don't forget : (accept queries and send trap)

    4) under trap select the version of your protocol (v1&v2) and port : 162

    5) Under snmp event check what do you want (I checked everything)

     

     Syslog receiver:

     

    1) System->log & report -> log & report configuration (or settings)

    2)Activate  Send Logs to Syslog then enter the IP or name

    3) Aplly

     

    PRTG SIDE:

    SNMP TRAP RECEIVER:

    1) In your fortigate device create new sensor 

    2) Under sereach write the key word "TRAP" You will have SNMP TRAP RECEIVER.

    3) Select the port the name and in include filter put "any".

    4) COntinue.

    SYSLOG RECEIVER:

    1) In step 2 don't write TRAP  just put the key word SYSLOG and enter the ip address of your device.

    2)Continue

    3) Wait a small amount of time, and then see the magic happening.

     

    And wait until an event happen.

    By the way i configure it and it works like charm, but I have bad time interpreting those results, so if you have any knowledge or documents that can help me, it will be very nice... Have good time monitoring :D

     

    PS: I edited the post because first i thought that you were looking for the snmp trap, so I just added the Syslog thing ;)