FCP-FSM-AN-7-2: Fortinet NSE 6 - FortiSIEM 7.2 AnalystDemo

Question

Refer to the exhibit.

Question Image

Which value would the FortiSIEM parser be expected to use to populate the Application Name field?

A applist
B Network.Service
C SSL
D wan1

Explanation

The app log field represents the application name, and its value is SSL. The appcat field (Network.Service) is the application category, while applist is the application-control profile name.

Learn more

FortiOS Log Message Reference — Application Control log fields

FCP-FSM-AN-7-2: Fortinet NSE 6 - FortiSIEM 7.2 AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ17

Community Discussion