Integrating logs from Fortinet devices with Splunk

d4wc3k — Wed, 16 Dec 2020 12:12:54 GMT

Hello Everyone on Splunk Forum.

I want to integrate logs from following Fortinet devices
1) Switch, model: FortiSwitch148E-POE
2) Access Points, models: FortiAP 221C and FortiAP 221E

I am aware that for Fortinet Firewall ( Fortigate ), i can install TA for that.
For Forti Switch I have found following manual:https://kb.fortinet.com/kb/documentLink.do?externalID=FD44999

But what should be done on Splunk side for getting Fortinet logs properly proccessed by Splunk, i could not find addons for that.

Thanks

BR
Dawid

topic Integrating logs from Fortinet devices with Splunk in Getting Data In

Integrating logs from Fortinet devices with Splunk