ArcSight Connectors Documentation
cancel

SmartConnector for Fortinet FortiGate Syslog

Comments
sricharan1

Hi,

I find the "device address" field is empty in the logs. I have installed Fortinet Fortigate Connector Version 5.2.6.6434.0.. Kindly suggest in which field i would get the device address of the particular device which is sending the logs. I have referred the connector guide, in that also i don't find any information about the device address filed.

john.robinson21

Hello Sri,

I am using FortiGate as well and notice the same field is empty.  I do see the host name is correct and shown in the logs.  I usually put the IP address in the description box when installing the connector.  Another work around could be to include the IP address in the connector name, but then you would need 1 connector per FortiGate product which may not be ideal.