Syslog Server Fortigate. This also how to handle cases where syslog has been masking s