Firepowe management center integration with fortisiem

[Taher11]

Hello, 

I successfully integrated the FMC from Cisco with the fortisiem platform, but all the logs I received are unkown.

Any suggestion to resolve this issue?

[FSM_FTNT]

Hi,

Can you provide some more sample events? You can send the to me directly and we will check.

Are these events generated by FTD and forwarded via FMC or are they FMC generated events?

Thanks

[Taher11]

The events are generated by the FMC :

[FSM_FTNT]

We need the raw log, can you export in CSV and share or post direct to me?

[FSM_FTNT · Accepted solution]

Hi, have a look at the attached parser.

You will need to create a new parser https://help.fortinet.com/fsiem/7-0-1/Online-Help/HTML5_Help/Creating-a-Custom-Parser.html

If you can provide more sample events, we can improve this parser.

Thanks

[Taher11]

Thank you for your support