# Display critical alerts of Fortigate into opendistro

**URL:** <https://forum.opensearch.org/t/display-critical-alerts-of-fortigate-into-opendistro/3742>\
**Category:** Performance Analyzer\
**Created:** [September 11, 2020, 2:01pm UTC](https://forum.opensearch.org/t/display-critical-alerts-of-fortigate-into-opendistro/3742 "2020-09-11T14:01:19Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![sushyyy](https://avatars.discourse-cdn.com/v4/letter/s/ec9cab/32.png) [@sushyyy](https://forum.opensearch.org/u/sushyyy)\
**Post date:** [September 11, 2020, 2:01pm UTC](https://forum.opensearch.org/t/display-critical-alerts-of-fortigate-into-opendistro/3742/1 "2020-09-11T14:01:19Z")

</div>

Hello,  
I would like to know if anyone of you has an idea about how can i connect my Fortigate into opendistro.  
My point is that fortigate could automaticaly display dayli alerts into graphs in opendistro.

---

<div class="post-metadata">

**Author:** ![stmx38](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/stmx38/32/4354_2.png) [@stmx38](https://forum.opensearch.org/u/stmx38)\
**Post date:** [September 11, 2020, 3:12pm UTC](https://forum.opensearch.org/t/display-critical-alerts-of-fortigate-into-opendistro/3742/2 "2020-09-11T15:12:00Z")

</div>

Hello @sushyyy  
Did you try this - [Filebeat - Fortinet module](https://www.elastic.co/guide/en/beats/filebeat/master//filebeat-module-fortinet.html)?

---

<div class="post-metadata">

**Author:** ![sushyyy](https://avatars.discourse-cdn.com/v4/letter/s/ec9cab/32.png) [@sushyyy](https://forum.opensearch.org/u/sushyyy)\
**Post date:** [September 11, 2020, 3:44pm UTC](https://forum.opensearch.org/t/display-critical-alerts-of-fortigate-into-opendistro/3742/3 "2020-09-11T15:44:30Z")

</div>

@stmx38 well no i didn’t try it but its seams to be an x-pack module so i guess i need to pay for that, but im not sur it it will work with opendistro

---

<div class="post-metadata">

**Author:** ![stmx38](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/stmx38/32/4354_2.png) [@stmx38](https://forum.opensearch.org/u/stmx38)\
**Post date:** [September 11, 2020, 4:09pm UTC](https://forum.opensearch.org/t/display-critical-alerts-of-fortigate-into-opendistro/3742/4 "2020-09-11T16:09:56Z")

</div>

It is a Filebeat module?

---

<div class="post-metadata">

**Author:** ![sushyyy](https://avatars.discourse-cdn.com/v4/letter/s/ec9cab/32.png) [@sushyyy](https://forum.opensearch.org/u/sushyyy)\
**Post date:** [September 13, 2020, 5:14pm UTC](https://forum.opensearch.org/t/display-critical-alerts-of-fortigate-into-opendistro/3742/5 "2020-09-13T17:14:54Z")

</div>

Its a module included in the elk x-pack, but yeah its a module used for filebeat

---

<div class="post-metadata">

**Author:** ![llauber](https://avatars.discourse-cdn.com/v4/letter/l/f05b48/32.png) [@llauber](https://forum.opensearch.org/u/llauber)\
**Post date:** [September 15, 2020, 2:15pm UTC](https://forum.opensearch.org/t/display-critical-alerts-of-fortigate-into-opendistro/3742/6 "2020-09-15T14:15:29Z")

</div>

we are using Logstash to receive Fortigate log messages:

logstash.conf: |  
input {  
udp {  
port =\> 5114  
type =\> “fortigate”  
}  
}