Log can received from firewall but cannot show in search

[Soradej]

Hi everyone.

I’m a new member for graylog. This application is version interesting to use but I have some problem as below.

I installed new graylog version 4.3.5 on CentOS 7.9 and try to get syslog from pfSense and Fortigate Firewall.

• For pfSense, can get and can show in search page.
• For Fortigate, can get log but cannot show in search page.
• I had set timezone in graylog config to Asia/Bangkok

How can I solve this problem?
Please kindly help me.

[H2Cyber]

For Fortinet, make sure you setup a Raw UDP input in Graylog. On the Fortinet side of things, you can tweak the syslog destination port using the following commands :

config log syslogd setting
set status enable
set port XXXX

where XXXX is the UDP port number for the Raw UDP input in Graylog

[Soradej]

Fortinet can send log to graylog as image but cannot show in search.

[Soradej]

Search’s screen shot

[Soradej]

I’m very wonder in graylog.
This afternoon after login, I can search log from Fortigate and can collect some log as my requirement.

Thank you everyone so much.