Automation > trigger > FortiOS Event log

[Mynno]

Hello,

I would like to know if it is possible to change the AND in the fields to OR because I would like my action to be triggered only if one of the parameters I define is triggered.

Thank you in advance.

[funkylicious · Accepted solution]

Hi,

As far as I know, it cannot be changed.

Field filters defined will look into the Event(s) that you choose above and search of the param log field:value pair that you define and all must match it cannot do one or other.

You could create multiple ones if you need different combinations.

https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/950487/fortios-event-log-tri...