When there are no matching parsers for a device log, what does FortiAnalyzer do?

The correct answer is B. Applies the generic SYSLOG parser. When FortiAnalyzer receives a log that does not match any specific device parser, it automatically applies the generic SYSLOG parser, allowing the log to be ingested and processed even without a dedicated parser.

Logging and Monitoring

Question

Options

AStores the log but doesn't normalize it
BApplies the generic SYSLOG parser
CDrops the log
DArchives the log for future analysis

How the community answered

(45 responses)

A
7% (3)
B
89% (40)
C
2% (1)
D
2% (1)

Explanation

When FortiAnalyzer receives a log that does not match any specific device parser, it automatically applies the generic SYSLOG parser, allowing the log to be ingested and processed even without a dedicated parser.

Topics

#log parsers#SYSLOG#generic parser#log normalization

Community Discussion

No community discussion yet for this question.

Full FCP_FAZ_AN-7.6 Practice