# FortiGate — Multiple Security Event Types

Recorded against /assets/index-CY6Sm-TX.js; source revision a4b4e2f; browser-observed workflow. No live target was connected.

## MULTIPLE LOG TYPES

A single security product sends traffic, web filtering and I P S events.

## IDENTIFY FORTIGATE

Enter Fortinet and FortiGate as the parser identity.

## ADD ANOTHER LOG TYPE

Click Add Another Log Type so traffic and threat records can be reviewed independently.

## SET NAMES AND LOGS

Name the log types Traffic and Threat, then paste two real source events into each group.

## ANALYZE ALL TYPES

Analyze the combined four-event sample. Do not omit an event shape.

## VERIFY COVERAGE

Read the result for all four events and confirm every type is represented.

## REVIEW DATA

Review extracted values from both traffic and threat records.

## NORMALIZE MAPPINGS

Map the original fields to Stellar Cyber seven point zero targets without discarding vendor fields.

## CREATE COMBINED DRAFT

Continue to Create Parser only when a shared parser draft is supported.

## FINAL TEST

Run the final sample test on all submitted events before downloading.

## DOWNLOAD PACKAGE

Download the tested draft, then verify separately in your target runtime.

## VERIFY EACH TYPE

The downloadable sample contains the original published Traffic, Web Filter and I P S examples.