Events
The following two tabs are available in Events:
- Summary
The Summary tab displays the top five most frequent events in each type of event log and a line chart to show aggregated events by each severity level. Clicking on a peak in the line chart will display the specific event count for the selected severity level.
There is an option for the line chart to change the time filter in which the events occurred, from 5 minutes to 7 days.
The System Events log contains events such as:
-
Upgrade and downgrade of the system
-
Change of system configuration, such as timezone and FortiPAM recording settings
-
Deletion of outdated video files
-
Report generation
-
Reload of AntiVirus database
And more.
The User Events log contains events such as:
-
IP address and time when the user logs in or logs out
-
Login failure reason
-
User login as a normal user or API user
And more.
The HA Events log contains events such as:
-
Change in HA clusters
-
Synchronization status with the HA peers
And more.
The following options and widgets are available in the Summary tab:
Disk
Logs sourced from the disk.
Time frame From the dropdown, select from the following time filters:
-
5 minutes
-
1 hour
-
24 hours
-
7 days
System Events
Top system events by count.
User Events
Top user events by count.
HA Events
Top HA events by count.
In System Events, User Events, or HA Events widgets, select an event to open the corresponding details tab with all the logs for the event listed in a table.
-
- Details
The tab displays the related information of each log for a specific event type. The event type can be toggled with the event type dropdown located right of the search bar. Different filters can be added, such as date/time to filter logs in a time range.
The following options are available in the Details tab:
Refresh
To refresh the contents, click the refresh icon.
Download log
Select to export the selected log entry to your computer as a text file.
+Add Filter
From the dropdown, select a filter, select or add additional details about the filter to be used and hit
Enter
.Note: Logs can be filtered by date and time. The log viewer can be filtered with a custom range or with specific time frames.
Time frame settings for each Log & Report page are independent. For example, changing the time frame on the System Events page does not automatically change the time frame on the User Events and HA Events pages.
System Events
From the dropdown, select from the following event types to display:
System Events
User Events
HA Events
Log location Logs sourced from the FortiPAM disk.
Details
Select a log entry and then select Details to see more information about the log.