All trademarks and registered trademarks displayed on this app as well as all logos shown are the property of their respective owners.
Splunk for FortiOS 5 provides visibility into the FortiGate firewall logs. Based on the original app created by Abel.
As you may know with the new release of FortiOS the old app do not work due mainly to changes in the log format. This first release (beta) is aimed to provide the same functionality that have the original app for FortiOS 4.
NOTE: The app will only work with FortiOS 5 logs
New extractions based on the FortiOS 5 new log format
Some minor fixes on the app
The Splunk for FortiOS 5 can be installed by either the Splunk app setup screen, or by manually installing and configuring the app.
Once the app is installed, you need to configure the FortiGate firewall to send the logs to Splunk (udp/513 port). Below is shown the required commands to configure the firewall to send the logs (at date, FortiOS 5 do not support syslog configuration in the Web UI):
v1.0: Oct 2014
- Initial release
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.