Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Log Message Reference

    Home FortiManager 6.4.3 Log Message Reference
    6.4.3
    7.6.1
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.0.12
    6.0.11
    6.0.10
    6.0.9
    6.0.8
    6.0.7
    6.0.6
    6.0.5
    6.0.4
    6.0.3
    6.0.2
    6.0.1
    6.0.0
    5.6.11
    5.6.10
    5.6.9
    5.6.8
    5.6.7
    5.6.6
    5.6.5
    5.6.4
    5.6.3
    5.6.2
    5.6.1
    5.6.0
    5.4.7
    5.4.6
    5.4.5
    5.4.4
    5.4.3
    5.4.2
    5.4.1
    5.4.0
    5.0.1
    4.3.0
    4.1.0

    APPEVENT

    APPEVENT

    INCIDENT

    Log Field Name

    Description

    Data Type

    Length

    action

    string

    32

    affected_assets

    string

    128

    attachment

    string

    512

    attachment_type

    string

    64

    attach_source

    string

    32

    attach_source_id

    string

    64

    connector_name

    string

    64

    date

    string

    16

    desc

    string

    64

    devid

    string

    16

    end_time

    string

    128

    error

    string

    512

    eventtype

    string

    64

    incident_assigned_analyst

    string

    64

    incident_id

    string

    64

    incident_other_attrs

    string

    64

    incident_severity

    string

    64

    level

    enum

    11

    logid

    string

    16

    msg

    string

    4096

    note

    string

    256

    report_source

    string

    32

    report_source_id

    string

    64

    start_time

    string

    128

    status

    string

    36

    subtype

    string

    16

    task_id

    string

    64

    task_name

    string

    64

    time

    string

    16

    trigger_name

    string

    64

    trigger_type

    string

    64

    type

    enum

    16

    user

    string

    64

    user_from

    string

    64

    user_type

    string

    64

    vd

    string

    64

    INCIDENT Log Messages

    The following table describes the log message IDs and messages of the INCIDENT log.

    Message ID

    Message

    Severity

    100001

    New_Incident_Create

    Information

    100002

    Incident_Update

    Information

    100003

    Incident_Delete

    Information

    100004

    Incident_Attachment_Update

    Information

    100005

    Incident_Attachment_Add

    Information

    100006

    Incident_Attachment_Delete

    Information

    110001

    New_Incident_Create_Error

    Error

    110002

    Incident_Update_Error

    Error

    110003

    Incident_Delete_Error

    Error

    110004

    Incident_Attachment_Update_Error

    Error

    110005

    Incident_Attachment_Add_Error

    Error

    110006

    Incident_Attachment_Delete_Error

    Error

    PLAYBOOK

    Log Field Name

    Description

    Data Type

    Length

    action

    string

    32

    affected_assets

    string

    128

    connector_name

    string

    64

    data_src

    string

    64

    data_src_id

    string

    64

    data_src_type

    string

    64

    date

    string

    16

    desc

    string

    64

    devid

    string

    16

    end_time

    string

    128

    error

    string

    512

    eventtype

    string

    64

    event_id

    string

    64

    job_id

    string

    24

    level

    enum

    11

    logid

    string

    16

    msg

    string

    4096

    playbook_id

    string

    64

    playbook_name

    string

    128

    start_time

    string

    128

    status

    string

    36

    subtype

    string

    16

    task_id

    string

    64

    task_name

    string

    64

    time

    string

    16

    trigger_name

    string

    64

    trigger_type

    string

    64

    type

    enum

    16

    user

    string

    64

    user_from

    string

    64

    user_type

    string

    64

    vd

    string

    64

    PLAYBOOK Log Messages

    The following table describes the log message IDs and messages of the PLAYBOOK log.

    Message ID

    Message

    Severity

    110020

    Playbook_Triggered_by_User

    Information

    110021

    Playbook_Created_by_User

    Information

    110022

    Playbook_Updated_by_User

    Information
    Previous
    Next

    APPEVENT

    APPEVENT

    INCIDENT

    Log Field Name

    Description

    Data Type

    Length

    action

    string

    32

    affected_assets

    string

    128

    attachment

    string

    512

    attachment_type

    string

    64

    attach_source

    string

    32

    attach_source_id

    string

    64

    connector_name

    string

    64

    date

    string

    16

    desc

    string

    64

    devid

    string

    16

    end_time

    string

    128

    error

    string

    512

    eventtype

    string

    64

    incident_assigned_analyst

    string

    64

    incident_id

    string

    64

    incident_other_attrs

    string

    64

    incident_severity

    string

    64

    level

    enum

    11

    logid

    string

    16

    msg

    string

    4096

    note

    string

    256

    report_source

    string

    32

    report_source_id

    string

    64

    start_time

    string

    128

    status

    string

    36

    subtype

    string

    16

    task_id

    string

    64

    task_name

    string

    64

    time

    string

    16

    trigger_name

    string

    64

    trigger_type

    string

    64

    type

    enum

    16

    user

    string

    64

    user_from

    string

    64

    user_type

    string

    64

    vd

    string

    64

    INCIDENT Log Messages

    The following table describes the log message IDs and messages of the INCIDENT log.

    Message ID

    Message

    Severity

    100001

    New_Incident_Create

    Information

    100002

    Incident_Update

    Information

    100003

    Incident_Delete

    Information

    100004

    Incident_Attachment_Update

    Information

    100005

    Incident_Attachment_Add

    Information

    100006

    Incident_Attachment_Delete

    Information

    110001

    New_Incident_Create_Error

    Error

    110002

    Incident_Update_Error

    Error

    110003

    Incident_Delete_Error

    Error

    110004

    Incident_Attachment_Update_Error

    Error

    110005

    Incident_Attachment_Add_Error

    Error

    110006

    Incident_Attachment_Delete_Error

    Error

    PLAYBOOK

    Log Field Name

    Description

    Data Type

    Length

    action

    string

    32

    affected_assets

    string

    128

    connector_name

    string

    64

    data_src

    string

    64

    data_src_id

    string

    64

    data_src_type

    string

    64

    date

    string

    16

    desc

    string

    64

    devid

    string

    16

    end_time

    string

    128

    error

    string

    512

    eventtype

    string

    64

    event_id

    string

    64

    job_id

    string

    24

    level

    enum

    11

    logid

    string

    16

    msg

    string

    4096

    playbook_id

    string

    64

    playbook_name

    string

    128

    start_time

    string

    128

    status

    string

    36

    subtype

    string

    16

    task_id

    string

    64

    task_name

    string

    64

    time

    string

    16

    trigger_name

    string

    64

    trigger_type

    string

    64

    type

    enum

    16

    user

    string

    64

    user_from

    string

    64

    user_type

    string

    64

    vd

    string

    64

    PLAYBOOK Log Messages

    The following table describes the log message IDs and messages of the PLAYBOOK log.

    Message ID

    Message

    Severity

    110020

    Playbook_Triggered_by_User

    Information

    110021

    Playbook_Created_by_User

    Information

    110022

    Playbook_Updated_by_User

    Information
    Previous
    Next