Fortigate & PRTG as syslog server

[simosghi]

Hi everyone,

Has someone tried to configure fortiOS 5.4.1 to send syslog messages to PRTG syslog server?

Could you give me the configuration step?

Thank's

[Jeff_FTNT]

On FGT side, you may set up like:

config log syslogd setting     set status enable     set server "x.x.x.x"  ----PRTG server ip end

[Malik]

Hi, I can give you an what i did until now!

Fortigate Side:

SNMP TRAP RECEIVER:

1) in system->snmp  Under snmp v1/v2 select Create new Or Edit (your existing)

2) select your community name (must much with the prtg community)

3) enter the IP address and don't forget : (accept queries and send trap)

4) under trap select the version of your protocol (v1&v2) and port : 162

5) Under snmp event check what do you want (I checked everything)

 Syslog receiver:

1) System->log & report -> log & report configuration (or settings)

2)Activate  Send Logs to Syslog then enter the IP or name

3) Aplly

 

PRTG SIDE:

SNMP TRAP RECEIVER:

1) In your fortigate device create new sensor 

2) Under sereach write the key word "TRAP" You will have SNMP TRAP RECEIVER.

3) Select the port the name and in include filter put "any".

4) COntinue.

SYSLOG RECEIVER:

1) In step 2 don't write TRAP  just put the key word SYSLOG and enter the ip address of your device.

2)Continue

3) Wait a small amount of time, and then see the magic happening.

And wait until an event happen.

By the way i configure it and it works like charm, but I have bad time interpreting those results, so if you have any knowledge or documents that can help me, it will be very nice... Have good time monitoring :D

PS: I edited the post because first i thought that you were looking for the snmp trap, so I just added the Syslog thing ;)