Skip to main content
adem_netsys
Explorer III
November 9, 2023
Question

SIEM API

  • November 9, 2023
  • 2 replies
  • 2482 views

Hello guys,

 

We have a forcepoint one product. I want to get the logs of this to siem. How can I do it with api, does anyone have any information?

2 replies

abarushka
Staff
Staff
November 9, 2023

Hello,

 

There is a lot of API documentation on fortinet developer web-site. Please find the details by following the link below:

 

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/712168/fortinet-developer-network-access

adem_netsys
Explorer III
November 10, 2023

Hello,

 

As far as i understand this document, i need two sponsor from fortinet. How can i overcome this situation?

 

Thank you for interest 

ede_pfau
SuperUser
SuperUser
November 11, 2023

You need to get recommendations from two FTNT employees. Thus, it's far easier for a partner of become a member, by contacting their channel account mgrs.

 

But, getting back to your request, I'm not sure if you'd really need to get into the API. Have you checked the "External Systems Integration Guide" (https://docs.fortinet.com/document/fortisiem/7.1.0/external-systems-configuration-guide/780675/fortisiem-external-systems-configuration-guide-online)?

adem_netsys
Explorer III
November 12, 2023

Yeah, i've checked this documents but it has not i'm looking for things. I have a forcepoint one product. it does not send syslog so i think i have to do this with api.