Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Domsi
New Contributor

Log Viewer

Hi. I'm sending my logs to a syslog server (Synology NAS). The log files are hard to read, because the "message" column has dozens of values which can't be filtered. I can download the log files from syslog server, but as expected there is also the same message format. FortiAnalyzer is too expensive and I don't want to send my logs to FortiCloud...

 

I have tried some "log viewers" but they are also not able to divide the fields of the the "message" part.

Do you now any viewer (maybe freeware) which can process the forti logs, so that I can filter/hide columns?

4 REPLIES 4
Markus
Valued Contributor

Hi If you are under 500MB/Day of Logs, you can use Splunk. There is also an App avaiable from Fortinet, with already preconfigured dashboards. Kibana, Sexylog or Graylog are other opensource tools that maybe could fit. But they need some work to configure accordingly. Best


________________________________________________________
--- NSE 4 ---
________________________________________________________

________________________________________________________--- NSE 4 ---________________________________________________________
Domsi
New Contributor

Thank you Markus.

 

But I wasn't able to manage this in a suitable way with the recommended tools.

 

I have enable the "csv" format on the fortigate settings. Then I have created a little application which reads the logs files into a grid, where I can filter an adjust everything as I want.

humblePie
New Contributor II

And for other newbies like me, who are dangerous but want to learn, here is what I did to import to Splunk: Well, I wrote up a detailed set of instructions (with "issues", but like I said, newbie like me and dangerous) then ran across this, which will give much more satisfactory results.

https://www.fortinet.com/content/dam/fortinet/assets/alliances/Fortinet-Splunk-Deployment-Guide.pdf

 

Fortigate 30E FortiOS v6.0.12 build0419 (GA)

Fortigate 30E FortiOS v6.0.12 build0419 (GA)
lobstercreed

Do you have the ability to run FortiAnalyzer on a VM?  The license and maintenance is dirt cheap (~$1k/year for what we use) compared to the value you will get .  It can also serve as an excellent syslog server for anything else you may want to throw at it.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors