ASIM ASIM Authentication parser for Fortinet - Fortigate

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index


Parser Information

Property Value
Parser Name ASimAuthenticationFortinetFortigate
Built-in Parser _ASim_Authentication_FortinetFortigate
Schema Authentication
Schema Version 0.1.4
Parser Type 🔌 Source (product-specific)
Product Fortigate
Parser Version 0.1.0 (version history)
Last Updated Mar 10, 2026
Unifying Parser ASimAuthentication
Source File Parsers\ASimAuthentication\Parsers\ASimAuthenticationFortinetFortigate.yaml

Description

This ASIM parser supports normalizing Fortinet - Fortigate administrator authentication logs to the ASIM Authentication normalized schema.

Source Tables

This parser reads from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
CommonSecurityLog DeviceEventClassID !in "0100022949,0100022952"
DeviceProduct has "Fortigate"
DeviceVendor == "Fortinet"

Parameters

Name Type Default
disabled bool False

Associated Connectors

The following connectors provide data for this parser:

Connector Solution
CefAma Common Event Format
Fortinet Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel (legacy connector)
FortinetAma Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel (legacy connector)
VirtualMetricDirectorProxy VirtualMetric DataStream
VirtualMetricMSSentinelConnector VirtualMetric DataStream
VirtualMetricMSSentinelDataLakeConnector VirtualMetric DataStream

Solutions: Common Event Format, Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel (legacy connector), VirtualMetric DataStream

References


Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index