FortiAnalyzer Generic Connector

[aalitariq]

Hi,

I have a FortiAnalyzer on AWS and in FAZ we have a 'Generic Connector' which is configured to forward incident messages.

The problem is I am getting device down messages (Event/Syslog) forwarded on that queue as well, while I have only configured the queue for the incidents. Can anyone please suggest how I can prevent the device down or any other message from being forwarded to the Generic Connector?

And, is there any way we can update the IP dynamically (like DDNS) for FAZ?