If the log message header contains:
subtype=admin
then the log message describes administrator and user logins on the FortiRecorder unit, for both local and remote authentication.
This section describes log messages of that subtype.