Problem with two types of logs from one input port 513

Elastic Stack Elastic Agent
1

Good day everyone!

Please help me with problem.
I install Elastic 8.3. and try use only elastic agent with default integrations.
The problem is on port 513 I receive logs from two different firewalls (fortinet and checkpoint), please tell me how to sort these logs so that elastic processes them separately. if I integrate the checkpoint integration on elastic agent, then checkpoint logs are processed correctly, but logs from fortigate are not processed properly. How could I processed fortigate and checkpoint logs properly. even from one input port 513

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.