Send logs via fortianalyzor to syslog?

[markel]

Hello all,

So I received a request from one of our customer regarding their Fortianalyzor.

They want to collect firewall logs from the fortianalyzor and send (or forward) the logs to their syslog server.

Now, I do not exactly know what the point behind this is, but is this doable? Do Fortianalyzor really forward logs to another log server (syslog)? I thought the FortiCollector did that. But anyway, I looked it up and found in the Fortianalyzor: System settings > Log forwarding and I guess this will do the trick but Im still not so sure.

Appreciate any help.

[akristof]

Hello,

Thank you for your question. You can take a look at this:

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-Forwarding-Logs-from-FortiAnalyzer-to...

[markwarner]

This KB was written for versions 5.0 to 5.4.
To forward your logs to a syslog server in real time as they are recieved by the FAZ, you need to configure Log Forwarding from System Settings:
https://docs.fortinet.com/document/fortianalyzer/7.0.4/administration-guide/621804/log-forwarding