Best Practise to add PostGreSQL to FortiSIEM

[AlexPien]

Hello everyone,

Has anyone already integrated PostgreSQL with FortiSIEM?

I couldn’t find any reference in the External System Configuration Guide, and I also haven’t come across any parser or predefined event types for PostgreSQL.

From my point of view, the integration should be possible via JDBC, similar to Oracle or other databases. However, I don’t have any hands-on experience with PostgreSQL audit logging or integration, and neither do my customers.

Does anyone have an idea or experience to share? Otherwise, I guess it will be a matter of trial and error. :)

Best regards,
Alex

[Secusaurus]

Hi @AlexPien,

I would just let postresql write to syslog and arrange the machine to send syslog to your collector.

Best,

Christian

[AlexPien]

Thanks for the link and the idea. This would be more easy! I will try it