FortiAuthenticator logs

FortiAnalyzer supports normalizing FortiAuthenticator logs as Fabric logs.

The following field mapping applies:

FortiAuthenticator Log Field	Normalized Fabric Log Field
devid	data_sourceid
data_source_name	data_sourcename
status	app_state
action	event_action
logid	event_id
msg	event_message
logdesc	event_profile
faclogindex	event_ref
level	event_severity
subtype	event_subtype
type	event_type
host_classification	host_classification
host_hwvendor	host_hwvendor
host_hwver	host_hwver
host_ip	host_ip
host_mac	host_mac
nas,host_name	host_name
host_osname	host_osname
host_osver	host_osver
host_type	host_type
host_uid	host_uid
user	user_id