# Log can received from firewall but cannot show in search

**URL:** <https://community.graylog.org/t/log-can-received-from-firewall-but-cannot-show-in-search/25323>\
**Category:** Graylog Central (peer support)\
**Created:** [August 17, 2022, 9:17am UTC](https://community.graylog.org/t/log-can-received-from-firewall-but-cannot-show-in-search/25323 "2022-08-17T09:17:26Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Soradej](https://avatars.discourse-cdn.com/v4/letter/s/838e76/32.png) [@Soradej](https://community.graylog.org/u/Soradej)\
**Post date:** [August 17, 2022, 9:17am UTC](https://community.graylog.org/t/log-can-received-from-firewall-but-cannot-show-in-search/25323/1 "2022-08-17T09:17:26Z")

</div>

Hi everyone.

I’m a new member for graylog. This application is version interesting to use but I have some problem as below.

I installed new graylog version 4.3.5 on CentOS 7.9 and try to get syslog from pfSense and Fortigate Firewall.

- For pfSense, can get and can show in search page.
- For Fortigate, can get log but cannot show in search page.
- I had set timezone in graylog config to Asia/Bangkok

How can I solve this problem?  
Please kindly help me.

---

<div class="post-metadata">

**Author:** ![H2Cyber](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/h2cyber/32/12536_2.png) [@H2Cyber](https://community.graylog.org/u/H2Cyber)\
**Post date:** [August 17, 2022, 4:17pm UTC](https://community.graylog.org/t/log-can-received-from-firewall-but-cannot-show-in-search/25323/2 "2022-08-17T16:17:24Z")

</div>

For Fortinet, make sure you setup a **Raw UDP** input in Graylog. On the Fortinet side of things, you can tweak the syslog destination port using the following commands :

> config log syslogd setting  
> set status enable  
> set port XXXX

where XXXX is the UDP port number for the Raw UDP input in Graylog

---

<div class="post-metadata">

**Author:** ![Soradej](https://avatars.discourse-cdn.com/v4/letter/s/838e76/32.png) [@Soradej](https://community.graylog.org/u/Soradej)\
**Post date:** [August 18, 2022, 3:43am UTC](https://community.graylog.org/t/log-can-received-from-firewall-but-cannot-show-in-search/25323/3 "2022-08-18T03:43:40Z")

</div>

Fortinet can send log to graylog as image but cannot show in search.

 ![Screen Shot 2022-08-17 at 16.13.44](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/4/4e74e92c5263960783a97bb45efe11c5b7b5a92d.png)

---

<div class="post-metadata">

**Author:** ![Soradej](https://avatars.discourse-cdn.com/v4/letter/s/838e76/32.png) [@Soradej](https://community.graylog.org/u/Soradej)\
**Post date:** [August 18, 2022, 3:44am UTC](https://community.graylog.org/t/log-can-received-from-firewall-but-cannot-show-in-search/25323/4 "2022-08-18T03:44:37Z")

</div>

Search’s screen shot

 ![Screen Shot 2022-08-17 at 16.14.35](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/8/82179d4eb3cfac7a5cebf2ac54e2c068ead1b1b6.png)

---

<div class="post-metadata">

**Author:** ![Soradej](https://avatars.discourse-cdn.com/v4/letter/s/838e76/32.png) [@Soradej](https://community.graylog.org/u/Soradej)\
**Post date:** [August 18, 2022, 3:16pm UTC](https://community.graylog.org/t/log-can-received-from-firewall-but-cannot-show-in-search/25323/5 "2022-08-18T15:16:59Z")

</div>

I’m very wonder in graylog.  
This afternoon after login, I can search log from Fortigate and can collect some log as my requirement.

Thank you everyone so much.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [September 1, 2022, 3:17pm UTC](https://community.graylog.org/t/log-can-received-from-firewall-but-cannot-show-in-search/25323/6 "2022-09-01T15:17:10Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
