FortiGate Netflow logs to Zeek or Filebeat to ElasticSearch

[robcowart]

You might want to consider ElastiFlow. The Basic Tier license is free. Fortinet doesn’t send any vendor-specific fields, so unless you a larger number of flows/sec, the Basic license should be fine.

Introduction | ElastiFlow