- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to send destination domain to remote syslog server from Fortigate?
Hi,
I have configured Fortigate to send traffic logs to a remote syslog server.
The GUI displays the destination IP along with the corresponding domain correctly.
But only the 'dstip' is sent to syslog server, while the 'domain' is not included.
How can I send the 'domain' along with the 'dstip'?
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I set below, then dst domain (as dstname field) is sent to syslog server well.
Thank you all.
conf log setting
set resolve-ip enable
end
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This feature is only for Fortiget GUI
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-show-hostname-in-forward-traffic-lo...
Your syslog is receiving the raw log, IP should be resolved by that ssylog server.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Please run this command in CLI:-
conf log gui-display
get
set resolve-hosts enable
end
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I set below, then dst domain (as dstname field) is sent to syslog server well.
Thank you all.
conf log setting
set resolve-ip enable
end
