How to send destination domain to remote syslog server from Fortigate?

Hi,

I have configured Fortigate to send traffic logs to a remote syslog server.

The GUI displays the destination IP along with the corresponding domain correctly.

But only the 'dstip' is sent to syslog server, while the 'domain' is not included.

How can I send the 'domain' along with the 'dstip'?

Best answer by kimsw

I set below, then dst domain (as dstname field) is sent to syslog server well.

Thank you all.

conf log setting
set resolve-ip enable
end

Staff

This feature is only for Fortiget GUI

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-show-hostname-in-forward-traffic-log/ta-p/218709

Your syslog is receiving the raw log, IP should be resolved by that ssylog server.

Staff

Hi,

Please run this command in CLI:-

conf log gui-display
get
set resolve-hosts enable

end

kimswAuthorAnswer

Visitor III

I set below, then dst domain (as dstname field) is sent to syslog server well.

Thank you all.

conf log setting
set resolve-ip enable
end

Sign up