How to check receive log from fortigateVM64 on VM broker syslog collector

Poobes — Mon, 12 Oct 2020 10:15:08 GMT

How to check receive log from fortigate VM64 on VM broker syslog collector?
I setup log fortigate VM64 pattern as by Cortex xdr manual but no log from FortiGate send to Cortex Data Lake.

Re: How to check receive log from fortigateVM64 on VM broker syslog collector

gjenkins — Fri, 11 Dec 2020 20:13:06 GMT

Hi @Poobes,

With Cortex XDR Version 2.5, the Data Ingestion Dashboard was introduced to show the logs being ingested from external sources. In particular, you can hone in on the vendor, product, or device as would be needed to identify your Fortigate. Please see this link regarding the Data Ingestion Dashboard and view it in your own XDR tenant by going to Reporting > Dashboards and selecting the "Data Ingestion Dashboard" on the top-left of your screen.

Sample Screenshot

topic Re: How to check receive log from fortigateVM64 on VM broker syslog collector in Cortex XDR Discussions

How to check receive log from fortigateVM64 on VM broker syslog collector

Re: How to check receive log from fortigateVM64 on VM broker syslog collector