Does anyone with experience on create custom parsers for Sangfor NGAF Syslog?Here is the sample log
Thank you for using the Community Forum.
I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.
Hello again Stevenliang,
I spoke to one of our engineers who said that 'Sangfor NGAF is not compatible with SIEM, which is why the unknown events appeared. To create a new parser there is a course on the training page: https://training.fortinet.com/local/staticpage/view.php?page=library_fortisiem-parser.
I hope this helps!
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.