OP Manager Parser

[Ali_Maher]

Hello,

I hope all is well. 

We need to integrate with OP Manger, and we found that it still does not have a built-in parser yet.

Anyone faced that issue, or tried to create one.

[premchanderr]

Hi Ali,

Currently this product is not listed in supported devices: 

https://docs.fortinet.com/document/fortisiem/7.2.3/external-systems-configuration-guide/780675/forti...

If you can receive syslog in SIEM, then do provide sample raw log by modifying confidential details and I can suggest something. 

[adem_netsys]

Hi @Ali_Maher,

Did you solve your problem, I am in the same situation, I need a parser.

Thank you

[FSM_FTNT]

What do the logs look like, do you have some samples raw events?

[adem_netsys]

Actually, there is a bit complicated situation, I don't know if you have encountered it before, but we realized that the logs on OpManager come to SIEM from the source that generated the log. We will add a static IP to the Parser and try to ensure that the logs on the Manager do not come from different sources.

[adem_netsys]

Hi @Ali_Maher,

Did you get the Parser and how do you get the OP Manager logs?