topic Re: Fortigate SNMP LOGS to Splunk in Splunk Enterprise

Fortigate SNMP LOGS to Splunk?

RJ1997 — Wed, 11 Jan 2023 17:11:21 GMT

I have a question

How I can send the SNMP logs of the FortiGate firewall to splunk?

Can any one help ??

PaulPanther — Tue, 10 Jan 2023 08:50:43 GMT

RJ1997 — Tue, 10 Jan 2023 08:58:16 GMT

yeah but I didn't find what I need exactly

PaulPanther — Tue, 10 Jan 2023 09:04:38 GMT

@RJ1997 So you're talking about the source configuration that is unclear to you? There is a Fortinet-Splunk-Deployment-Guide.pdf

RJ1997 — Tue, 10 Jan 2023 09:10:17 GMT

Yeah,

let me make my question more clear.

Is the Splunk" FortiGate Application" or Enterprise Security show me the SNMP? logs? (enables me to monitor hardware on my network )

PaulPanther — Tue, 10 Jan 2023 09:25:05 GMT

@RJ1997 Okay, now we're talking about data visualization and analytics.

Could you please confirm if the fortigate are getting ingested and if they are searchable?

And are you familiar with the difference between Splunk Apps (Splexicon:App - Splunk Documentation) and Splunk Addons (Splexicon:Addon - Splunk Documentation)?