Hi Everyone, We have configured our Fortiweb to send logs to QRadar
SIEM.For that we have used this "log siem-policy", which is pretty
straight forward. But when it reaches to SIEM, its not parsing. Further
investigation and IBM acknowledged that, ev...
Hi Abelio, Thanks for the response. Actually we are using the same
setting "Log Policy > SIEM Policy" and using IBM LEEF as 'set type'.
When we asked IBM about logs not getting parsed under Universal Leef,
they are saying this should only be separate...