Pull events from sftp directory/path

[AliHaider]

Hello,

is there any guide on how to setup scheduled event pulling from a sftp server directory or path?

currently FortiSIEM is able to log in to the sftp from cli with the provided username and password. 

I can also successfully add credentials from the GUI. However, after this I am a bit lost.
Do i need to create a script and import the daily csv file?
what other ways are possible?

Edit 1: we are running 5.3.1

[SimonMonai]

Hi Ali

What is the reason that you would like to poll the files instead of pushing them in regular intervals? I am thinking of installing the FortiSIEM agent configured to load a specific log file. 

Regards
Simon-------------------------------------------
Original Message:
Sent: Feb 20, 2022 01:30 AM
From: Ali Haider
Subject: Pull events from sftp directory/path

Hello,

is there any guide on how to setup scheduled event pulling from a sftp server directory or path?

currently FortiSIEM is able to log in to the sftp from cli with the provided username and password. 

I can also successfully add credentials from the GUI. However, after this I am a bit lost.
Do i need to create a script and import the daily csv file?
what other ways are possible?

Edit 1: we are running 5.3.1

[DanielHanman]

Hi Ali,

Which integration are you trying to use?

Thanks


------------------------------
Daniel
FortiSIEM Product Manager
------------------------------
-------------------------------------------
Original Message:
Sent: Feb 20, 2022 01:30 AM
From: Ali Haider
Subject: Pull events from sftp directory/path

Hello,

is there any guide on how to setup scheduled event pulling from a sftp server directory or path?

currently FortiSIEM is able to log in to the sftp from cli with the provided username and password. 

I can also successfully add credentials from the GUI. However, after this I am a bit lost.
Do i need to create a script and import the daily csv file?
what other ways are possible?

Edit 1: we are running 5.3.1