Fortinet white logo
Fortinet white logo

FortiOS Log Message Reference

Log ID numbers

Log ID numbers

The ID (logid) is a 10-digit field. It is a unique identifier for that specific log and includes the following information about the log entry.

Log ID number components

Description

Examples

Log Type

Represented by the first two digits of the log ID.

  • Traffic log IDs begin with "00".

  • Event log IDs begin with "01".

Sub Type or Event Type

Represented by the second two digits of the log ID.

  • VPN log subtype is represented with "01" which belongs to the Event log type that is represented with "01".

    Therefore, all VPN related Event log IDs will begin with the 0101 log ID series.

Message ID

The last six digits of the log ID represent the message ID.

  • An administrator account always has the log ID 0000003401.

The logid field is a number assigned to all permutations of the same message. It classifies a log entry by the nature of the cause of the log message, such as administrator authentication failures or traffic. Other log messages that share the same cause will share the same logid.

Log ID numbers

Log ID numbers

The ID (logid) is a 10-digit field. It is a unique identifier for that specific log and includes the following information about the log entry.

Log ID number components

Description

Examples

Log Type

Represented by the first two digits of the log ID.

  • Traffic log IDs begin with "00".

  • Event log IDs begin with "01".

Sub Type or Event Type

Represented by the second two digits of the log ID.

  • VPN log subtype is represented with "01" which belongs to the Event log type that is represented with "01".

    Therefore, all VPN related Event log IDs will begin with the 0101 log ID series.

Message ID

The last six digits of the log ID represent the message ID.

  • An administrator account always has the log ID 0000003401.

The logid field is a number assigned to all permutations of the same message. It classifies a log entry by the nature of the cause of the log message, such as administrator authentication failures or traffic. Other log messages that share the same cause will share the same logid.