Secure Syslog between Fortigate and Eventlog Analyzer

[fionaC]

I am try to send secure syslog between my Fortigate and Eventlog analyzer and it is not working. The logs are being sent, but Eventlog Analyzer cannot ingest them. I worked with both Fortigate and Eventlog Analyzer and still cannot get this to work. EventLog seems to see the logs as a batch and not a single message. 

I am wondering if anyone else has gotten this to work?

[hbac]

Hi @fionaC,

Can you check which format are they expecting? On the FortiGate, you can run this command to check "show full log syslogd setting". 

Regards,