Hi,
I'm sending firewall logs via syslog to a server, where I process data and save it to a local database, but after the update from 6.2.7 to 6.2.8, I see that all lines ends with null byte unicode "u\0000" as if null was used as a separator instead of new line which prevent the script I'm using from transforming data, how can I fix this ?
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello,
I see your post is from 2021-10-20 but I am replying anyway in the hope its going to be useful for you.
I would suggest to verify if the FortiGate really sends out syslog messages with a null byte at the end of the line.
For this create a network capture to analyze the raw data being sent via syslog.
If the FortiGate indeed sends a null byte instead of a proper carriage return then this could be a bug in the FortiOS code.
Please note that the FortiGate 6.2.x branch is out of engineering support meaning there will be no further bug fixes applied to the 6.2 code.
It is therefore recommended to upgrade to the latest 6.4 release instead which is 6.4.9
Short term you may want to upgrade to the latest 6.2.x release which is currently 6.2.10 to see if the issue got resolved in this branch.
Best Regards
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1732 | |
1106 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.