Activity Feed
- Posted Transforms.conf devid on Getting Data In. 04-24-2024 02:29 AM
- Tagged Transforms.conf devid on Getting Data In. 04-24-2024 02:29 AM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 |
04-24-2024
02:29 AM
Hello, We are encountering a problem with the parsing on the fortigate add-on. It does not recognize the devid of our equipment. This fortigate having a serial number starting with FD, it was not taken into account by the regex. regex: ^.+?devid=\"?F(?:G|W|\dK).+?(?:\s |\,|\,\s)type=\"?(traffic|utm|event|anomaly)
From the stanza: [force_sourcetype_fortigate] We updated it on our side, but is this behavior normal? Thanks in advance, Best regards.
... View more
- Tags:
- fortigate
Labels
- Labels:
-
transforms.conf