FortiManager log types and subtypes
The following table identifies the subtypes for the event log type that are supported by FortiManager. When FortiAnalyzer features are enabled on FortiManager, additional subtypes are supported. See FortiAnalyzer log types and subtypes.
Type |
Description |
Subtype |
Subtype Category Number |
---|---|---|---|
Event
|
Records system and administrative events, such as downloading a backup copy of the configuration, or daemon activities.
|
System manager (system) |
01 |
FortiGate-FortiManager protocol (fgfm) |
02 |
||
Device configuration (devcfg) |
03 |
||
Global database (glbcfg) |
04 |
||
Script manager (scrmgr) |
05 |
||
Web portal (webport) |
06 |
||
Firewall objects (scfw) |
07 |
||
Security console (scply) |
08 |
||
VPN console (scvpn) |
09 |
||
Endpoint manager (epmgr) |
10 |
||
Revision history (rev) |
11 |
||
Deployment manager (dm) |
12 |
||
Real-time monitor (rtmon) |
13 |
||
Log and report manager (lrmgr) |
14 |
||
High Availability (HA) |
15 |
||
Firmware manager (fmwmgr) |
16 |
||
FortiGuard service (fgd) |
17 |
||
FortiClient Manager (fctmgr) |
18 |
||
FortiMail manager (fmlmgr) |
19 |
||
Debug IO log (iolog) |
20 |
||
Object changes (objcfg) |
21 |
||
Device Manager (devmgr) |
22 |
||
FortiManager web service (fmgws) |
23 |
||
Log daemon (logd) |
25 |
||
FIPS-CC (fips) |
26 |
||
Managed device operations (devops) |
27 |
||
Management extension applications (docker) |
42 |