Forticlient logs to Syslog Server

[famspower]

Hello,

I installed the Fortclient in Autonomous mode and tried to send logs to my syslog server. So I edited the XML configuration file to specify the syslog server address but nothing is going there. I can extract the local logs but nothing is being collected by the syslog server.

Any suggestion ?

[EMES]

I dont know much about forwarding to syslog from forticlient but could it be a local firewall blocking the connection out? You can try and spin up wireshark and search for UDP 514 for syslog packets.

[famspower]

I don't think so. I already investigated using Wireshark, but the capture was empty.