Hello, We have followed the WMI/OMI Steps to integrate with FortiSIEM to
receive the Security, System, and Application Logs.we received the
Performance logs Only, how we can receive the security logs?
Hello Everyone, we have followed the docx below to integrate with the
crowdStrike EDR:Crowdstrike | FortiSIEM 7.2.4 | Fortinet Document
Library we have successfully received the below event types: Q1:- We
didnt see any log related to the detection su...
Hello, We need to integrate FortiSIEM-Cisco WSA/ESA through Syslog as
per the official documents: As we should call Log Name: IronPort-Mail OR
IronPort-Web; we cant add another entry (Duplicate). So, we need to know
the Log type and the corresponding...
I tried this form Supervisor CLI:/opt/phoenix/bin/omic -s
/opt/phoenix/config/smb.conf -U 'User%Password' //IP 'SELECT * FROM
Win32_NTLogEvent WHERE Logfile = "Security" AND TimeGenerated >=
"20240222000000.000000+000"'and it retrieved the security l...
I use this command from Supervisor CLI:/opt/phoenix/bin/omic -s
/opt/phoenix/config/smb.conf -U 'user%pass' //192.168.x.x 'SELECT * FROM
Win32_NTLogEvent WHERE Logfile = "Security" AND TimeGenerated >=
"20240222000000.000000+000"'and we can retrieve ...
Ok, thanks!we integrated with CrowdStrike EDR using API, so the
FortiSIEM Supervisor pulls the events.we can access EDR Events from
Admin => Setup => Pull Events. We searched all the logs but the
detection summary logs dont come out. Is there anythin...
