# Fortigate appliance and ELK syslog server

**URL:** <https://discuss.elastic.co/t/fortigate-appliance-and-elk-syslog-server/357855>\
**Category:** Logstash\
**Created:** [April 21, 2024, 11:22am UTC](https://discuss.elastic.co/t/fortigate-appliance-and-elk-syslog-server/357855 "2024-04-21T11:22:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![m\_pahlevanzadeh](https://avatars.discourse-cdn.com/v4/letter/m/8e7dd6/32.png) [@m\_pahlevanzadeh](https://discuss.elastic.co/u/m_pahlevanzadeh)\
**Post date:** [April 21, 2024, 11:22am UTC](https://discuss.elastic.co/t/fortigate-appliance-and-elk-syslog-server/357855/1 "2024-04-21T11:22:30Z")

</div>

Scenario: I want to create a syslog server for CISCO‌ SW and Fortigate Firewall, I configured my FG to send log to ELK server. I tested with `tcpdump` and data recieved on the given port.  
I found two way and I don't know choose the correct way:

1. `fortinet` module in `kibana`
2. This guide: [GitHub - enotspe/fortinet-2-elasticsearch: Fortinet products logs to Elasticsearch](https://github.com/enotspe/fortinet-2-elasticsearch/)

Which one is better and why? And if you have a recommenedation you make me happy.....  
**UPDATE‌** :  
By the way, deep of log is very impportant.