alias454 / graylog-fortinet-content-pack Goto Github PK

Hi,

I am seeing extra fields in my extracted messages for each key value pair, i.e. srcip, srcintf ect but cannot find where these are configured to be extracted or how to prevent it?

Thanks,

Simon

Import Content Pack
= Error importing content pack, please ensure it is a valid JSON file. Check your Graylog logs for more information.

Below error message pop up while importing the JSON file on Graylog 2.1.2. I am able to import JSON created by juiceman84. Did I miss anything?

-------------- Error Message --------------
"Could not import content pack
Error importing content pack, please ensure it is a valid JSON file. Check your Graylog logs for more information."

I had Problems importing this Content Pack into Graylog 5.0. I tried to extract all the extractors. but there was an error while importing the extractors.
I took a look over them and made them compliant with Graylog 5.0:

Fortinet Extractor.txt