Decoders required for switches

[ekta dhussa]

Hello team,

Require decode for below devices

Cisco WS-C2960S-48TS-L 

firewall FortiGate 71G 

Kindly assist.

Regards,

Ekta

[Olamilekan Abdullateef Ajani]

Hello,

Wazuh already has Fortinet and Cisco ISO decoders bundled out of the box, you can find the reference below. However, if your logs do not match any of the decoders, please share sample logs so we can assist with creating a custom decoder for your use.
https://github.com/wazuh/wazuh-ruleset/blob/master/decoders/0100-fortigate_decoders.xml

https://github.com/wazuh/wazuh-ruleset/blob/master/decoders/0065-cisco-ios_decoders.xml

You may also look to the official documentation on decoders and rules if you intend to create them yourself.

Ref:
https://documentation.wazuh.com/current/user-manual/ruleset/ruleset-xml-syntax/decoders.html

https://wazuh.com/blog/creating-decoders-and-rules-from-scratch/

https://documentation.wazuh.com/current/user-manual/ruleset/ruleset-xml-syntax/rules.html

I also found a community decoder and rules for fortinet which is worth looking at: 
https://github.com/alextibor/wazuh-fortigate-rules-decoders

Regards,