Configuring a Syslog Destination on Your Fortinet FortiGate Security Gateway Device
To forward FortiGate Security Gateway events to JSA, you must configure a syslog destination.
- Log in to the command line on your Fortinet FortiGate Security Gateway appliance.
- Type the following commands, in order, replacing the variables
with values that suit your environment.
config log syslogd setting set csv status enable set facility <facility_name> set port <port_integer> set reliable enable set server <IP_address> end example:set facility syslog
set facility syslog
If you set the value of reliable as enable, it sends as TCP; if you set the value of reliable as disable, it sends as UDP.
Your deployment might have multiple FortiGate Security Gateway instances that are configured to send event logs to a FortiAnalyzer. If you want to send FortiAnalyzer events to JSA, see Configuring a Syslog Destination on Your Fortinet FortiAnalyzer Device.