Graylog doesn't parse logs from Fortigate 400D

Graylog Central (peer support)
1

Hello! I’m trying to send logs from Fortigate 400D and all seems working at first glance:

image
image.png953×253 22.8 KB

But when i try to look at them, graylog shows “Nothing found”.

After that, i made several other inputs and tested them. Only Raw/Plaintesxt UDP worked for FortiGate 400D. But this is obvious that they are not readable in that format.

Does anybody solved this?

Thnks!

2

maybe you can add more information to this issue: https://github.com/Graylog2/graylog2-server/issues/3854

your only option is to use the RAW Input and parse the messages with processing pipelines (or extractors) into something readable.