Fortigate log forwarding cli. set accept-aggregation enable.