wanout

WAN outgoing traffic in bytes

uint64

wanoptapptype

WAN Optimization Application type

string

wanin

WAN incoming traffic in bytes

uint64

vwpvlanid

Virtual Wire Pair vlan id

uint32

vwlservice

Application that is matched by the traffic (internet-service-app-ctrl)

string

vwlquality

Quality info of the service rule that is matched by traffic

string

vwlname

string

vwlid

Virtual Wan Link (SD-WAN) service id

uint32

vrf

Virtual router forwarding

uint16

vpntype

The type of the VPN tunnel

string

vip

string

vd

Virtual domain name

string

utmaction

Security action performed by UTM

string

user

User name

string

url

URL

string

unauthusersource

The method used to detect unauthenticated user name

string

unauthuser

Unauthenticated user name

string

tz

Time zone

string

type

Log type

string

tunnelid

uint32

transport

NAT Source Protocol Port

uint16

transip

NAT Source IP

ip

tranport

NAT Destination Port

uint16

tranip

NAT Destination IP

ip

trandisp

NAT translation type

string

time

Time

string

tcpsynrtrs

uint32

tcpsynackrtrs

uint32

tcpsrt

uint32

tcprst

string

tcprplrtrs

uint32

tcporgrtrs

uint32

tcpnrt

uint32

subtype

Subtype of the traffic

string

sslaction

Action taken by ssl-ssh-profile

string

srcuuid

UUID of the Source Address Object

string

srcthreatfeed

string

srcswversion

string

srcssid

Source SSID

string

srcserver

Source server

uint8

srcreputation

uint32

srcremote

ip

srcregion

string

srcport

Source protocol port number

uint16

srcname

Source name

string

srcmacvendor

string

srcmac

MAC address associated with the Source IP

string

srcip

Source IP address

ip

srcintfrole

Source Interface's assigned role (LAN, WAN, etc.)

string

srcintf

Source interface name

string

srcinetsvc

Internet service name for the source

string

srchwversion

string

srchwvendor

string

srcfamily

string

srcdomain

string

srccountry

Country name for Source IP

string

srccity

string

snr

int8

signal

int8

shapingpolicyname

string

shapingpolicyid

Shaping Policy ID

uint32

shapersentname

Traffic shaper name for sent traffic

string

shaperrcvdname

Traffic shaper name for received traffic

string

shaperperipname

Traffic shaper name (per IP)

string

shaperperipdropbyte

Dropped bytes per IP by shaper

uint32

shaperdropsentbyte

Sent bytes dropped by shaper

uint32

shaperdroprcvdbyte

Received bytes dropped by shaper

uint32

sessionid

Session ID

uint32

service

Name of Service

string

sentpktdelta

uint32

sentpkt

Sent Packets

uint32

sentdelta

Delta Sent Bytes

uint64

sentbyte

Sent Bytes

uint64

saasname

string

replysrcintf

string

replydstintf

string

realserverid

uint32

rcvdpktdelta

uint32

rcvdpkt

Received Packets

uint32

rcvddelta

Delta Received Bytes

uint64

rcvdbyte

Received Bytes

uint64

radioband

Radio Band

string

psrcport

uint16

proxyapptype

string

proto

Protocol Number

uint8

poluuid

UUID of the Firewall Policy

string

policytype

Policy type

string

policyname

Policy name

string

policymode

string

policyid

Firewall Policy ID

uint32

pdstport

uint16

osname

Name of the device's OS

string

msg

Log message

string

mastersrcmac

The master MAC address for a host that has multiple network interfaces

string

masterdstmac

Destination master MAC address

string

logid

Log ID

string

level

Log Level

string

lanout

LAN outgoing traffic in bytes

uint64

lanin

LAN incoming traffic in bytes

uint64

identifier

uint16

group

User group name

string

gatewayid

uint32

fwdsrv

string

fctuid

FortiClient UID

string

eventtime

Epoch time in nanoseconds

uint64

emstag2

string

emstag

string

emsconnection

string

durationdelta

uint32

duration

Duration of the session

uint32

dstuuid

UUID of the Destination Address Object

string

dstuser

string

dstunauthusersource

string

dstunauthuser

string

dstthreatfeed

string

dstswversion

string

dstssid

Destination SSID

string

dstserver

Destination Server

uint8

dstreputation

uint32

dstregion

string

dstport

Destination Protocol Port Number

uint16

dstosname

Destination OS name

string

dstname

Destination name

string

dstmac

Destination Mac Address

string

dstip

Destination IP Address

ip

dstintfrole

Destination Interface's assigned role (LAN, WAN, etc.)

string

dstintf

Destination Interface

string

dstinetsvc

Internet service name for the destination

string

dsthwversion

string

dsthwvendor

string

dstfamily

string

dstdevtype

Destination Device Type

string

dstcountry

Country name for the destination IP

string

dstcity

string

dstauthserver

string

devtype

Device Type

string

devid

Device Serial Number

string

date

Date

string

crscore

Threat Weight score

uint32

crlevel

Threat Weight level

string

craction

Action performed by Threat Weight

uint32

comment

Customized policy comment

string

clientdevicetags

string

clientdeviceowner

string

clientdevicemanageable

string

clientdeviceid

string

clientdeviceems

string

clientcert

string

channel

WiFi Channel

uint32

centralnatid

central-snat-map id

uint32

authserver

Remote Authentication server

string

apsn

Access Point serial number

string

apprisk

Application Risk Level

string

applist

Application Control profile (name)

string

appid

Application ID

uint32

appcat

Application category

string

appact

The security action from app control

string

app

Application Name

string

ap

Access Point name

string

agent

User agent - eg. agent="Mozilla/5.0"

string

action

The status of the session: deny - Session was denied accept - Allowed Forward session start - Session starts (log message was created when the session was created) dns - DNS query return error ip-conn - Failed connection attempts close - Local-traffic session allowed timeout - Allowed session was timeout client-rst - Session reset by client server-rst - Session reset by server

string

accessproxy

string