Web Session ASIM parser for Fortinet FortiGate
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimWebSessionFortinetFortiGate |
| Built-in Parser | _ASim_WebSession_FortinetFortiGate |
| Schema | WebSession |
| Schema Version | 0.2.6 |
| Parser Type | 🔌 Source (product-specific) |
| Product | Fortinet FortiGate |
| Parser Version | 0.3.0 (version history) |
| Last Updated | Sep 12, 2025 |
| Unifying Parser | ASimWebSession |
| Source File | Parsers\ASimWebSession\Parsers\ASimWebSessionFortinetFortiGate.yaml |
Description
This ASIM parser supports filtering and normalizing Fortinet FortiGate logs produced by the Microsoft Sentinel Fortinet connector to the ASIM Web Session normalized schema.
Source Tables
This parser reads from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
CommonSecurityLog |
DeviceProduct startswith "Fortigate"DeviceVendor == "Fortinet" |
✓ | ✓ | ✓ |
Parameters
| Name | Type | Default |
|---|---|---|
disabled |
bool | False |
Associated Connectors
The following connectors provide data for this parser:
Solutions: Common Event Format, Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel (legacy connector), VirtualMetric DataStream
References
- ASIM Web Session Schema
- ASIM
- web log fields
- Fortinet FortiGate CEF setup
- Fortinet FortiGate syslogd documentation
- Fortinet FortiGate extended logging for user agent, http method and x-forwarded-for
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊