Your logs are denied traffic. Nothing appear in the denied reports even if you doesn't create a filter. I suugest to upgrade cause this App was created around the 4.0MR3. I've done some test with MR2 and traffic reports have worked but i cannot confirm it with all MR2 patches. ... View more

About the index, nothing is described about the index because it isn't specific for this application but global to Splunk. ... View more

Hello, What is the version of your Fortigate firmware ? The App only supports 4.0MR3 and few logs from the 4.0MR2. If the version of the firmware is OK, have you created a new index where the Fortigate logs are collected ? If yes, have you give the hability of your account to access in this index by default ? Regards, Abel ... View more

Hello, Have you set the soucetype "fortigate" for the logs you collect from your firewalls. You have an example il the README Regards, Abel ... View more