How are firewall logs generated, I want to know how frequently (or how infrequently ) are logs generated from reading packet data if that is what it is. I want to detect anomaly on an enterprise network for my project, so for starters i was looking on how are logs generated.
P.S.: what else do i need to mention to help my cause?
Edit-1: There is already a firewall device which has inbuilt IDS.The device is fortigate fg-800c which has inbuilt IDS and IPs capabilities.