Sending logs and Windows host events to FortiAnalyzer or FortiManager
Sending logs to FortiAnalyzer or FortiManager requires the following:
- FortiClient
- EMS
- FortiAnalyzer or FortiManager
When FortiClient connects Telemetry to EMS, the endpoint can upload logs and Windows host events directly to FortiAnalyzer or FortiManager units on port 514 TCP.
FortiClient logs and Windows host events display in the FortiClient ADOM in FortiAnalyzer.
FortiClient Telemetry must connect to EMS for FortiClient to upload logs and Windows host event logs directly to FortiAnalyzer or FortiManager. |