Destination IP address
The dst_ip field is in most FortiMail log messages where either:
-
type=statistics -
type=spam
It indicates the destination IP address of the SMTP session, which could be either a mail server or a mail relay.
This field is empty if session_id is empty, or when a DKIM key could not be retrieved from the DNS server.