# FortiGate Firewall

**URL:** https://discuss.elastic.co/t/fortigate-firewall/129245
**Category:** Logstash
**Created:** [April 24, 2018, 7:35am UTC](https://discuss.elastic.co/t/fortigate-firewall/129245 "2018-04-24T07:35:44Z")
**Posts on this page:** 1
**Showing post:** 11

<div class="post-metadata">

### Author: ![lcguy](https://avatars.discourse-cdn.com/v4/letter/l/35a633/32.png) [@lcguy](https://discuss.elastic.co/u/lcguy)
#### Post date: [April 24, 2018, 3:37pm UTC](https://discuss.elastic.co/t/fortigate-firewall/129245/11 "2018-04-24T15:37:14Z")

</div>

Yes, it works now for FortiGate firewall.  
I have tweak a bit. I copied some from other people's posts.

Thanks a lot, Krunal.

input {  
udp {  
port =\> 5514  
type =\> "syslog"  
}  
}

filter {  
mutate {  
gsub =\>  
["message", ": ", ":",  
"message", "^\<[0-9][0-9][0-9]\>", ""]  
}

kv { }

if [msg] {  
mutate {  
replace =\> ["message", "%{msg}"]  
}  
}  
}

output {  
elasticsearch { hosts =\> ["localhost:9200"] }  
stdout { codec =\> rubydebug }  
}

---

_[View the full topic](https://discuss.elastic.co/t/fortigate-firewall/129245)._