elastic / elastic/integrations

Firewall Integrations | Support Additional Syslog Formats

Open
#4,077 4 comments 0 reactions 0 assignees View on GitHub
enhancement Integration:fortinet_fortigate Integration:juniper_srx Integration:sophos Team:Security-Deployment and Devices
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
2d 18h
Merged PRs (30d)
182

Description

Continuing the work started in #3377

Address these firewall integrations to ensure each is consistent in the syslog formats supported.

**Fortinet**
Syslog configuration now includes the option to enable RFC5424 format. Docs [here](https://docs.fortinet.com/document/fortigate/7.0.0/cli-reference/456620/config-log-syslogd-setting).
- [ ] RFC5424

**Juniper SRX**
- [ ] RFC3164

**Sophos XG**
Device Standard Format isn't a standard syslog format according to [their docs](https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SystemServices/LogSettings/SyslogServerAdd/index.html). Fine to limit our support to Central Reporting Format.
- [ ] RFC3164
- [ ] RFC5424

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.