Fortinet black logo

Administration Guide

Sending logs and Windows host events to FortiAnalyzer or FortiManager

Sending logs and Windows host events to FortiAnalyzer or FortiManager

Sending logs to FortiAnalyzer or FortiManager requires the following:

  • FortiClient
  • EMS
  • FortiAnalyzer or FortiManager

When FortiClient connects Telemetry to EMS, the endpoint can upload logs and Windows host events directly to FortiAnalyzer or FortiManager units on port 514 TCP.

FortiClient logs and Windows host events display in the FortiClient ADOM in FortiAnalyzer.

FortiClient Telemetry must connect to EMS for FortiClient to upload logs and Windows host event logs directly to FortiAnalyzer or FortiManager.

Sending logs and Windows host events to FortiAnalyzer or FortiManager

Sending logs to FortiAnalyzer or FortiManager requires the following:

  • FortiClient
  • EMS
  • FortiAnalyzer or FortiManager

When FortiClient connects Telemetry to EMS, the endpoint can upload logs and Windows host events directly to FortiAnalyzer or FortiManager units on port 514 TCP.

FortiClient logs and Windows host events display in the FortiClient ADOM in FortiAnalyzer.

FortiClient Telemetry must connect to EMS for FortiClient to upload logs and Windows host event logs directly to FortiAnalyzer or FortiManager.