Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
kimsw
New Contributor II

How to send destination domain to remote syslog server from Fortigate?

Hi,

I have configured Fortigate to send traffic logs to a remote syslog server.

The GUI displays the destination IP along with the corresponding domain correctly.

But only the 'dstip' is sent to syslog server, while the 'domain' is not included.

How can I send the 'domain' along with the 'dstip'?

1 Solution
kimsw
New Contributor II

I set below, then dst domain (as dstname field) is sent to syslog server well.

Thank you all.

 

conf log setting
    set resolve-ip enable
end

View solution in original post

3 REPLIES 3
Mrinmoy
Staff
Staff

This feature is only for Fortiget GUI

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-show-hostname-in-forward-traffic-lo...

Your syslog is receiving the raw log, IP should be resolved by that ssylog server.

Mrinmoy Purkayastha
rahul_p1
Staff
Staff

Hi,

 

Please run this command in CLI:- 

conf log gui-display
get
    set resolve-hosts enable 

end 

 

kimsw
New Contributor II

I set below, then dst domain (as dstname field) is sent to syslog server well.

Thank you all.

 

conf log setting
    set resolve-ip enable
end

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors