Skip to main content
Domsi
New Member
February 11, 2020
Question

Log Viewer

  • February 11, 2020
  • 1 reply
  • 12446 views

Hi. I'm sending my logs to a syslog server (Synology NAS). The log files are hard to read, because the "message" column has dozens of values which can't be filtered. I can download the log files from syslog server, but as expected there is also the same message format. FortiAnalyzer is too expensive and I don't want to send my logs to FortiCloud...

 

I have tried some "log viewers" but they are also not able to divide the fields of the the "message" part.

Do you now any viewer (maybe freeware) which can process the forti logs, so that I can filter/hide columns?

    1 reply

    Markus
    New Member
    February 11, 2020

    Hi If you are under 500MB/Day of Logs, you can use Splunk. There is also an App avaiable from Fortinet, with already preconfigured dashboards. Kibana, Sexylog or Graylog are other opensource tools that maybe could fit. But they need some work to configure accordingly. Best

    Domsi
    DomsiAuthor
    New Member
    February 12, 2020

    Thank you Markus.

     

    But I wasn't able to manage this in a suitable way with the recommended tools.

     

    I have enable the "csv" format on the fortigate settings. Then I have created a little application which reads the logs files into a grid, where I can filter an adjust everything as I want.