Using the event log table
The Event log table under Log & Report > Log Access > Logs and FortiView > Logs > Event Log tab displays logs related to system-wide status and administrator activity.
Before you begin:
- You must have enabled local logging. See Configuring local log settings.
- You must have Read-Write permission for Log & Report settings.
To view and filter the log:
- Go to Log & Report > Log Access > Logs > Event Log
- Click Filter Settings to display the filter tools.
- Use the tools to create filter logic.
- Click Apply to apply the filter and redisplay the log.
Event log fields
| Column | Example | Description |
|---|---|---|
| Date | 2015-05-04 | Log date |
| Time | 15:50:37 | Log time |
| Log ID | 1005081 | Log ID |
| Type | event | Log type: event |
| Sub Type | config | Log subtype: config, admin, system, ha, update, healthcheck, vserver, router, user, antidos. |
| Priority | information | Log level |
| Msg ID | 36609 | Message ID |
| User | admin | User that performed the operation |
| UI | GUI(172.30.153.4) | User interface from which the operation was performed |
| Action | none | Administrator action |
| Status | success | Status of the event |
| Message | "changed settings for 'ddos spp threshold-adjust' on domain 'SPP-0'" | Log message |
Note: By default, this table displays the most recent records first and all columns. If no filters or check boxes are selected, the table displays data from the last 10 years. This the default filter applied internally.
- You can click a column heading to display controls to sort the rows or show/hide columns.
- You click a row to select a record. Log details for the selected event are displayed below the table.
- You can use the Filter Settings controls to filter the rows displayed in the table based on event type, severity, action, status, and other values.