FortiManager event log message example
2020-05-12 17:01:16 log_id=0001010018 type=event subtype=system pri=information desc="User login/logout successful" user="admin" userfrom="JSON(10.100.55.254)" msg="user 'admin' with profile 'Super_User' logout from JSON(10.100.55.254)" session_id=5108 adminprof="Super_User"
Event log message breakdown
|
Log Field |
Description |
|---|---|
|
Date: |
The year, month, and day when the event occurred in the format: YY-MM-DD |
|
Time: |
The hour, minute, and second of when the event occurred. |
|
Log ID: |
A ten-digit number that identifies the log type. The first two digits represent the log type, and the following two digits represent the log subtype. The last six digits represent the message ID number. |
|
Type: |
The section of the system where the event occurred. |
|
Subtype: |
The subtype of each log message. |
|
Pri: |
The severity level or priority of the event. There are several severity or priority levels. See Priority levels. |
|
Desc: |
A description of the activity or event recorded by the FortiManager unit. |
|
User: |
The name of the user creating the traffic. |
|
Userfrom: |
Where the user initiated the activity or event, if applicable. |
|
Msg: |
The activity or event recorded by the FortiManager unit. |
|
session_id: |
The session identification number. |
|
adminprof: |
The administrator profile associated with the administrator account. |