Create a Workflow to Save Malicious IPs from Fortinet in a Text File
I am looking for assistance in creating a workflow in Log360 that extracts malicious IPs detected by the Fortinet firewall and saves them in a text file at a specific network location.
Workflow Requirements:
- Data Source: Alerts generated by the Fortinet firewall.
- Action: Extract the malicious IP from the field in the logs.
remip - Storage Destination: Save the IPs in a text file () located at the network path .
ip2.txt\\server\blockip\ - Automation: This process should be automatically triggered every time a relevant alert from Fortinet is generated.
- Output Format: The text file should contain each IP on a new line.
I have tried setting up a script in the workflow, but I am encountering issues with saving the IP in the text file correctly. I would appreciate detailed instructions or a sample script to achieve this functionality.
Sticky Posts
[Contest Alert] Log360 product pro challenge
Hello everyone, It's contest time! We are happy to announce the Log360 product pro community contest. What is the contest about? All you have to do is click follow on the Log360 forum and answer 3 simple questions - and you stand a chance to win a $25 Amazon gift card! Yes, it's that simple. Enter the contest here » You can view the rules and other details over on the contest post in the Log360 forum. Go ahead and show us what a product pro you are!
