FortiEMS security Logs to Third Party SIEM

[U_shah]

Hi,

Is there a possibility to send Forticlient logs mostly security and system events that are fetched by FortiEMS to a third party SIEM.Right now, the only option I see is to send FortiEMS Event logs to Syslog. We dont have the SIEM on a public IP and thus require FortiEMS to be the mediator as it already collects these logs for its dashboard.

[ebilcari]

It seems that FCT EMS cannot be used to forward FCT events via syslog. FortiAnalyzer can serve as a collection point for FCT events and then forward that information to a 3rd party SIEM.

[U_shah]

We dont have a FortiAnalyzer. Sad that there is a dependency on 3rd product.