I tried to integrate Collector Syslog and fortigate device into my Utmstack but there's no response ...

[joeljorle]

I tried to integrate Colector Syslog and fortigate device into my Utmstack but there's no response ...

As a collector I use " Almalinux9 "
✅ I already opened port 7014 for syslog ( all devices ) , and 7005 for fortigate
✅I receive the log of the fortigate on 7005 port
✅I receive the log of other device on 7014 port as u see (like ftphost)
✅my linux agent work perfectly into the collector
✅The UTM Syslog script was perfectly integrated into the collector
✅The UTM Fortigate script was perfectly integrated into the collector

❌In data processing , there's no event comming from syslog/fortigate
❌there's no collector registered in collector page..

How can I solve this...

I'm an african MSSP provider i plan to use for Soc(SIEM/SOAR)

So i tried some features to make sure that its not gogoing to to have a problem...

[robyfr]

Have you checked whether the required communication ports between UTMStack Agent and UTMStack Server, as indicated in the following documentation page, are open?

https://documentation.utmstack.com/v10/Installation/firewall_rules

[osmontero]

Hello, this have been fixed for versions greather than v11.0.2. The issue was related to the Syslog standard used by Fortinet when sending events over TCP.