Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
thelinuxlich
New Contributor

How can I send a log message through a custom program?

I'm trying to send a log message using Node.js by sending it through UDP(514), TCP(1470) and even a syslog library but nothing shows up on the SIEM dashboard. What am I doing wrong?

1 REPLY 1
FSM_FTNT
Staff
Staff

If you haven't got a parser defined then it probably won't appear on any dashboards.

 

You can do a raw log/keyword search from analytics. Search for a keyword you know for sure is in the logs.

 

Also validate that the syslog is being received at the network interface. As root user on the shell:\

 

tcpdump -i eth0 dst port 514 and host <192.168.77.99>

 

change the IP to that of the server sending the logs.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors