Events

The following two tabs are available in Events:

• Summary

  The Summary tab displays the top five most frequent events in each type of event log and a line chart to show aggregated events by each severity level. Clicking on a peak in the line chart will display the specific event count for the selected severity level.

  There is an option for the line chart to change the time filter in which the events occurred, from 5 minutes to 7 days.

  

  The System Events log contains events such as:

  • Upgrade and downgrade of the system

  • Change of system configuration, such as timezone and FortiPAM recording settings

  • Deletion of outdated video files

  • Report generation

  • Reload of AntiVirus database

    And more.

  The User Events log contains events such as:

  • IP address and time when the user logs in or logs out

  • Login failure reason

  • User login as a normal user or API user

    And more.

  The HA Events log contains events such as:

  • Change in HA clusters

  • Synchronization status with the HA peers

    And more.

  The following options and widgets are available in the Summary tab:

  Disk	Logs sourced from the disk.
  Time frame	From the dropdown, select from the following time filters: 5 minutes 1 hour 24 hours 7 days
  System Events	Top system events by count.
  User Events	Top user events by count.
  HA Events	Top HA events by count.

  In System Events, User Events, or HA Events widgets, select an event to open the corresponding details tab with all the logs for the event listed in a table.

• Details

  The tab displays the related information of each log for a specific event type. The event type can be toggled with the event type dropdown located right of the search bar. Different filters can be added, such as date/time to filter logs in a time range.

  

  The following options are available in the Details tab:

  Refresh	To refresh the contents, click the refresh icon.
  Download log	Select to export the selected log entry to your computer as a text file.
  +Add Filter	From the dropdown, select a filter, select or add additional details about the filter to be used and hit Enter. Note: Logs can be filtered by date and time. The log viewer can be filtered with a custom range or with specific time frames. Time frame settings for each Log & Report page are independent. For example, changing the time frame on the System Events page does not automatically change the time frame on the User Events and HA Events pages.
  System Events	From the dropdown, select from the following event types to display: System Events User Events HA Events
  Log location	Logs sourced from the FortiPAM disk.
  Details	Select a log entry and then select Details to see more information about the log.