Setup the SpanVA to go direct from Fortinet firewall to SpanVA. Logs were not being processed in CloudSOC Audit.
Logs failed to process. Not valid log files
Configuration was set to the datasource as a syslog server. The file format of the firewall logs, was not the correct format.
Create a syslog server and direct the logs from the firewall to the syslog server, and then from the syslog server to the SpanVA server.
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
This will clear the history and restart the chat.