What's new
This section identifies major changes in the Log Reference from version 6.4.0 and later. For more information about new features, please see the FortiOS 6.4 New Features Guide.
FortiOS 6.4.9
Log field values
The following log field values changed.
Traffic logs:
Field | Change |
---|---|
dstreputation | Field Added |
srcreputation |
Field Added |
Log ID changes
The following log IDs are changed.
Event logs:
LogID |
Message |
Change |
---|---|---|
22114 | LOG_ID_POWER_REDUNDANCY_DEGRADE | Log ID Added |
22115 | LOG_ID_POWER_REDUNDANCY_FAILURE | Log ID Added |
22807 | LOG_ID_VDOM_LIC | Log ID Added |
32262 | LOG_ID_RESTORE_IMG_CONFIRM | Log ID Added |
34428 | LOG_ID_NP7_HPE_PACKET_DROP | Log ID Added |
34430 | LOG_ID_NP7_HPE_PACKET_FLOOD | Log ID Added |
38420 | LOGID_EVENT_HTTPS_CONNECTION | Log ID Added |
53311 | LOG_ID_NPU_PER_MAPPING_ALLOCATION | Log ID Added |
FortiOS 6.4.8
There are no major log changes between FortiOS 6.4.7 and 6.4.8.
FortiOS 6.4.7
Log ID changes
The following log IDs are changed.
Event logs:
LogID |
Message |
Change |
---|---|---|
53312 | LOG_ID_NPD_INFO | Log ID Added |
53313 | LOG_ID_NPD_WARNING | Log ID Added |
53314 | LOG_ID_NPD_ERROR | Log ID Added |
FortiOS 6.4.6
Log ID changes
The following log IDs are changed.
Event logs:
LogID |
Message |
Change |
---|---|---|
34418 | LOG_ID_NP6_HPE_PACKET_DROP | Log ID Added |
34419 | LOG_ID_NP6_HPE_PACKET_FLOOD | Log ID Added |
43707 | LOG_ID_EVENT_WIRELESS_WTPR_SSID_UP | Log ID Added |
43708 | LOG_ID_EVENT_WIRELESS_WTPR_SSID_DOWN | Log ID Added |
FortiOS 6.4.5
Log ID changes
The following log IDs are changed.
Event logs:
LogID |
Message |
Change |
---|---|---|
45120 | LOG_ID_EC_INVALID_EMS_TAG_REFERENCED | Log ID Removed |
53203 | LOG_ID_CONNECTOR_OBJECT_UPDATE | Log ID Added |
53204 | LOG_ID_CONNECTOR_OBJECT_CANT_ADD | Log ID Added |
53205 | LOG_ID_CONNECTOR_OBJECT_CANT_REMOVE | Log ID Added |
FortiOS 6.4.4
There are no major log changes between FortiOS 6.4.3 and 6.4.4.
FortiOS 6.4.3
Log field values
The following log field values are changed.
AV logs:
Field | Change |
---|---|
attachment | Field Added |
cc |
Field Added |
subject |
Field Added |
DLP logs:
Field | Change |
---|---|
attachment | Field Added |
cc |
Field Added |
Event logs:
Field | Change |
---|---|
operdrmamode | Field Added |
slctdrmamode |
Field Added |
useralt |
Field Added |
FILE-FILTER logs:
Field | Change |
---|---|
attachment | Field Added |
cc |
Field Added |
Traffic logs:
Field | Change |
---|---|
vwlname | Field Added |
Log ID changes
The following log IDs are changed.
Event logs:
LogID |
Message |
Change |
---|---|---|
22954 | LOG_ID_INET_SVC_OBSOLETE | Log ID Added |
32096 | LOG_ID_GUI_DOWNLOAD_LOG | Log ID Added |
40706 | LOG_ID_EVENT_SYS_BROKEN_SYMBOLIC_LINK | Log ID Added |
43693 | LOG_ID_EVENT_WIRELESS_STA_WNM_ACTION_BSTM_REQ | Log ID Added |
43694 | LOG_ID_EVENT_WIRELESS_STA_WNM_ACTION_BSTM_RESP_ACCEPT | Log ID Added |
43695 | LOG_ID_EVENT_WIRELESS_STA_WNM_ACTION_BSTM_RESP_REJECT | Log ID Added |
43696 | LOG_ID_EVENT_WIRELESS_WTPR_DRMA_START | Log ID Added |
43697 | LOG_ID_EVENT_WIRELESS_WTPR_DRMA_STOP | Log ID Added |
43698 | LOG_ID_EVENT_WIRELESS_WTPR_DRMA_MODE | Log ID Added |
43699 | LOG_ID_EVENT_WIRELESS_STA_DHCP6_SOLICIT | Log ID Added |
43700 | LOG_ID_EVENT_WIRELESS_STA_DHCP6_ADVERTISE | Log ID Added |
43701 | LOG_ID_EVENT_WIRELESS_STA_DHCP6_REQUEST | Log ID Added |
43702 | LOG_ID_EVENT_WIRELESS_STA_DHCP6_CONFIRM | Log ID Added |
43703 | LOG_ID_EVENT_WIRELESS_STA_DHCP6_RENEW | Log ID Added |
43704 | LOG_ID_EVENT_WIRELESS_STA_DHCP6_REPLY | Log ID Added |
43705 | LOG_ID_EVENT_WIRELESS_STA_DHCP6_RELEASE | Log ID Added |
43706 | LOG_ID_EVENT_WIRELESS_STA_DHCP6_RECONFIGURE | Log ID Added |
53202 | LOG_ID_CONNECTOR_API_FAILED | Log ID Added |
FortiOS 6.4.2
Log field values
The following log field values are changed.
Event logs:
Field | Change |
---|---|
bibandwidthused | Field Added |
inbandwidthused |
Field Added |
outbandwidthused |
Field Added |
Email logs:
Field | Change |
---|---|
webmailprovider | Field Added |
GTP logs:
Field | Change |
---|---|
cggsn6 | Field Added |
cgsn6 | Field Added |
cpaddr6 | Field Added |
cpdladdr6 | Field Added |
cpdlisraddr6 | Field Added |
cpuladdr6 | Field Added |
csgsn6 | Field Added |
from6 | Field Added |
to6 | Field Added |
uggsn6 | Field Added |
ugsn6 | Field Added |
usgsn6 | Field Added |
DNS logs:
Field | Change |
---|---|
rcode | Field Added |
Traffic logs:
Field |
Change |
---|---|
dstgroup | Field Removed |
tunnelid | Field Added |
Log ID changes
The following log IDs are changed.
AV logs:
LogID |
Message |
Change |
---|---|---|
8981 | MESGID_SCAN_AV_CDR_INTERNAL_ERROR | Log ID Added |
Event logs:
LogID |
Message |
Change |
---|---|---|
43692 | LOG_ID_EVENT_WIRELESS_WTPR_ANTENNA_DEFECT_DETECT | Log ID Added |
49002 | LOG_ID_VNP_DPDK_PRIMARY_RESTART | Log ID Added |
49004 | LOGID_EVENT_HYPERV_SRIOV_SHOW_UP | Log ID Added |
49005 | LOGID_EVENT_HYPERV_SRIOV_DISAPPEAR | Log ID Added |
Email logs:
LogID |
Message |
Change |
---|---|---|
20480 | LOGID_ANTISPAM_EMAIL_SMTP_NOTIF | Log ID Removed |
20481 | LOGID_ANTISPAM_EMAIL_SMTP_BWORD_NOTIF | Log ID Removed |
20482 | LOGID_ANTISPAM_EMAIL_POP3_NOTIF | Log ID Removed |
20483 | LOGID_ANTISPAM_EMAIL_POP3_BWORD_NOTIF | Log ID Removed |
20484 | LOGID_ANTISPAM_EMAIL_IMAP_NOTIF | Log ID Removed |
20491 | LOGID_ANTISPAM_EMAIL_IMAP_BWORD_NOTIF | Log ID Removed |
20500 | LOGID_ANTISPAM_EMAIL_MSN_NOTIF | Log ID Removed |
20501 | LOGID_ANTISPAM_EMAIL_YAHOO_NOTIF | Log ID Removed |
20502 | LOGID_ANTISPAM_EMAIL_GOOGLE_NOTIF | Log ID Removed |
20503 | LOGID_EMAIL_SMTP_GENERAL_NOTIF | Log ID Removed |
20504 | LOGID_EMAIL_POP3_GENERAL_NOTIF | Log ID Removed |
20505 | LOGID_EMAIL_IMAP_GENERAL_NOTIF | Log ID Removed |
20506 | LOGID_EMAIL_MAPI_GENERAL_NOTIF | Log ID Removed |
20507 | LOGID_ANTISPAM_EMAIL_MAPI_BWORD_NOTIF | Log ID Removed |
20508 | LOGID_ANTISPAM_EMAIL_MAPI_NOTIF | Log ID Removed |
20480 |
LOGID_ANTISPAM_EMAIL_NOTIF |
Log ID Added |
20481 |
LOGID_EMAIL_GENERAL_NOTIF |
Log ID Added |
20482 |
LOGID_ANTISPAM_EMAIL_BWORD_NOTIF |
Log ID Added |
20510 |
LOGID_ANTISPAM_EMAIL_WEBMAIL_NOTIF |
Log ID Added |
FortiOS 6.4.1
Log field values
The following log field values are changed.
App logs:
Field | Change |
---|---|
parameters | Field Added |
Event logs:
Field | Change |
---|---|
snr | Field Added |
Traffic logs:
Field |
Change |
---|---|
dstauthserver | Field Added |
dstgroup | Field Added |
dstuser | Field Added |
signal | Field Added |
snr | Field Added |
Log ID changes
The following log IDs are changed.
Event logs:
LogID |
Message |
Change |
---|---|---|
20114 | LOG_ID_IPSA_SELFTEST_FAIL | Log ID Added |
46516 | LOG_ID_INTERNAL_LTE_MODEM_BEARER_TECH_CHANGE | Log ID Added |
53300 | LOG_ID_VNE_PRO_UPDATE_COMPLETED | Log ID Added |
53301 | LOG_ID_VNE_PRO_UPDATE_FAILED | Log ID Added |
SSL logs:
LogID |
Message |
Change |
---|---|---|
62005 | LOG_ID_SSL_EXEMPT_CATEGORY | Log ID Removed |
62007 | LOG_ID_SSL_EXEMPT_FTGD_CATEGORY | Log ID Added |
62008 | LOG_ID_SSL_EXEMPT_LOCAL_CATEGORY | Log ID Added |
62009 | LOG_ID_SSL_EXEMPT_USER_CATEGORY | Log ID Added |
FortiOS 6.4.0
Log type and subtype changes
- Internet Content Adaptation Protocol (ICAP) is added as a new log type with a log category ID of 20.
- SD-WAN is added as a new Event log subtype.
Log field values
The following log field values are changed.
Event logs:
Field | Change |
---|---|
auditreporttype | Field Added |
bibandwidth | Field Added |
checksum | Field Removed |
created | Field Added |
eventtype | Field Added |
hbdn_reason | Field Removed |
healthcheck | Field Added |
inbandwidth | Field Added |
infected | Field Removed |
jitter | Field Added |
latency | Field Added |
member | Field Added |
msgproto | Field Removed |
neighbor | Field Added |
newvalue | Field Added |
nf_type | Field Removed |
numpassmember | Field Added |
oldvalue | Field Added |
outbandwidth | Field Added |
packetloss | Field Added |
profile_vd | Field Removed |
profilegroup | Field Removed |
profiletype | Field Removed |
scanned | Field Removed |
serviceid | Field Added |
sess_duration | Field Removed |
slamap | Field Added |
slatargetid | Field Added |
stitchaction | Field Added |
suspicious | Field Removed |
to | Field Removed |
virus | Field Removed |
waninfo | Field Added |
ICAP logs:
Field |
Change |
---|---|
action |
Field Added |
date |
Field Added |
devid |
Field Added |
dstintf |
Field Added |
dstintfrole |
Field Added |
dstip |
Field Added |
dstport |
Field Added |
eventtime |
Field Added |
eventtype |
Field Added |
level |
Field Added |
logid |
Field Added |
msg |
Field Added |
policyid |
Field Added |
profile |
Field Added |
proto |
Field Added |
service |
Field Added |
sessionid |
Field Added |
srcintf |
Field Added |
srcintfrole |
Field Added |
srcip |
Field Added |
srcport |
Field Added |
subtype |
Field Added |
time |
Field Added |
type |
Field Added |
tz |
Field Added |
url |
Field Added |
vd |
Field Added |
SSL logs:
Field |
Change |
---|---|
certdesc |
Field Added |
eventsubtype |
Field Added |
reason |
Field Removed |
vrf |
Field Added |
Traffic logs:
Field |
Change |
---|---|
counticap |
Field Added |
dstcity |
Field Added |
dstregion |
Field Added |
srccity |
Field Added |
srcregion |
Field Added |
Web logs:
Field |
Change |
---|---|
antiphishdc |
Field Added |
antiphishrule |
Field Added |
Log ID changes
The following log IDs are changed.
AV logs:
Log ID |
Message |
Change |
---|---|---|
8457 |
MESGID_MMS_CHECKSUM |
Log ID Removed |
8458 |
MESGID_MMS_CHECKSUM_NOTIF |
Log ID Removed |
CIFS logs:
Log ID |
Message |
Change |
---|---|---|
63002 |
LOG_ID_CIFS_CONN_FAIL |
Log ID Added |
63003 |
LOG_ID_CIFS_AUTH_FAIL |
Log ID Added |
63004 |
LOG_ID_CIFS_AUTH_INTERNAL_ERROR |
Log ID Added |
63005 |
LOG_ID_CIFS_AUTH_KRB_ERROR |
Log ID Added |
Email logs:
LogID |
Message |
Change |
---|---|---|
20485 |
LOGID_ANTISPAM_ENDPOINT_FILTER_WARNING |
Log ID Removed |
20486 |
LOGID_ANTISPAM_ENDPOINT_FILTER_NOTIF |
Log ID Removed |
20487 |
LOGID_ANTISPAM_ENDPOINT_MM7_WARNING |
Log ID Removed |
20488 |
LOGID_ANTISPAM_ENDPOINT_MM7_NOTIF |
Log ID Removed |
20489 |
LOGID_ANTISPAM_ENDPOINT_MM1_WARNING |
Log ID Removed |
20490 |
LOGID_ANTISPAM_ENDPOINT_MM1_NOTIF |
Log ID Removed |
20492 |
LOGID_ANTISPAM_MM1_FLOOD_WARNING |
Log ID Removed |
20493 |
LOGID_ANTISPAM_MM1_FLOOD_NOTIF |
Log ID Removed |
20494 |
LOGID_ANTISPAM_MM4_FLOOD_WARNING |
Log ID Removed |
20495 |
LOGID_ANTISPAM_MM4_FLOOD_NOTIF |
Log ID Removed |
20496 |
LOGID_ANTISPAM_MM1_DUPE_WARNING |
Log ID Removed |
20497 |
LOGID_ANTISPAM_MM1_DUPE_NOTIF |
Log ID Removed |
20498 |
LOGID_ANTISPAM_MM4_DUPE_WARNING |
Log ID Removed |
20499 |
LOGID_ANTISPAM_MM4_DUPE_NOTIF |
Log ID Removed |
Event logs:
LogID |
Message |
Change |
---|---|---|
20079 |
LOG_ID_RAD_READY |
Log ID Removed |
22033 |
LOG_ID_FAIL_CSF_LOG_SYNC_NO_VALID_FSA |
Log ID Removed |
22050 |
LOG_ID_IPAMD_ADDRESS_ALLOCATED |
Log ID Added |
22051 |
LOG_ID_IPAMD_ADDRESS_SET_FAILED |
Log ID Added |
22052 |
LOG_ID_IPAMD_ADDRESS_INVALIDATED |
Log ID Added |
22053 |
LOG_ID_IPAMD_VALIDATION_COMPLETE |
Log ID Added |
22220 |
LOG_ID_EXT_RESOURCE |
Log ID Added |
22221 |
LOG_ID_EXT_RESOURCE_FAIL |
Log ID Added |
22222 |
LOG_ID_EXT_RESOURCE_LOAD |
Log ID Added |
22223 |
LOG_ID_EXT_RESOURCE_DEBUG |
Log ID Added |
22897 |
LOG_ID_FLCFGD_NAC_ADD |
Log ID Added |
22898 |
LOG_ID_FLCFGD_NAC_DELETE |
Log ID Added |
22899 |
LOG_ID_FLCFGD_NAC_MODIFY |
Log ID Added |
22919 |
LOG_ID_SVR_LOG_STATUS_CHANGED |
Log ID Added |
37910 |
MESGID_HB_PACKET_LOST |
Log ID Added |
38400 |
LOGID_EVENT_NOTIF_SEND_SUCC |
Log ID Removed |
38401 |
LOGID_EVENT_NOTIF_SEND_FAIL |
Log ID Removed |
38402 |
LOGID_EVENT_NOTIF_DNS_FAIL |
Log ID Removed |
43264 |
LOGID_MMS_STATS |
Log ID Removed |
43688 |
LOG_ID_EVENT_WIRELESS_APCFG_RECEIVE |
Log ID Added |
43689 |
LOG_ID_EVENT_WIRELESS_APCFG_VALIDATING |
Log ID Added |
43690 |
LOG_ID_EVENT_WIRELESS_APCFG_APPLY |
Log ID Added |
43691 |
LOG_ID_EVENT_WIRELESS_APCFG_REJECT |
Log ID Added |
45109 |
LOG_ID_EC_FTCL_LOGOFF |
Log ID Removed |
45119 |
LOG_ID_EC_FTCL_DISCONN |
Log ID Removed |
45120 |
LOG_ID_EC_INVALID_EMS_TAG_REFERENCED |
Log ID Added |
48300 |
LOG_ID_WRG_SVR_FGT_CONF |
Log ID Removed |
ICAP logs:
Log ID |
Message |
Change |
---|---|---|
60000 |
LOG_ID_ICAP_SERVER_ERROR |
Log ID Added |
SSL logs:
Log ID |
Message |
Change |
---|---|---|
62000 |
LOG_ID_SSL_CERT_BLACKLISTED |
Log ID Removed |
62001 |
LOG_ID_SSL_CERT_PASS |
Log ID Removed |
62002 |
LOG_ID_SSL_CERT_BLOCK |
Log ID Removed |
62003 |
LOG_ID_SSL_EXEMPT |
Log ID Removed |
62004 |
LOG_ID_SSL_EXEMPT_ADDR |
Log ID Added |
62005 |
LOG_ID_SSL_EXEMPT_CATEGORY |
Log ID Added |
62006 |
LOG_ID_SSL_EXEMPT_WHITELIST |
Log ID Added |
62050 |
LOG_ID_SSL_HS_CERT_REQ_EXEMPT |
Log ID Removed |
62051 |
LOG_ID_SSL_HS_CERT_REQ_BLOCK |
Log ID Removed |
62052 |
LOG_ID_SSL_HS_UNSUPPROTED_EXEMPT |
Log ID Removed |
62053 |
LOG_ID_SSL_HS_UNSUPPORTED_BLOCK |
Log ID Removed |
62100 |
LOG_ID_SSL_NEGOTIATION_INSPECT |
Log ID Added |
62101 |
LOG_ID_SSL_NEGOTIATION_BLOCK |
Log ID Added |
62102 |
LOG_ID_SSL_NEGOTIATION_BYPASS |
Log ID Added |
62200 |
LOG_ID_SSL_EXEMPT_ADDR |
Log ID Removed |
62202 |
LOG_ID_SSL_EXEMPT_FTGD_CAT |
Log ID Removed |
62300 |
LOG_ID_SSL_ANOMALY_CERT_BLACKLISTED |
Log ID Added |
62301 |
LOG_ID_SSL_ANOMALY_CERT_RESIGN_TRUSTED |
Log ID Added |
62302 |
LOG_ID_SSL_ANOMALY_CERT_RESIGN_UNTRUSTED |
Log ID Added |
62303 |
LOG_ID_SSL_ANOMALY_CERT_BLOCKED |
Log ID Added |
62304 |
LOG_ID_SSL_ANOMALY_CERT_SNI_MISMATCHED |
Log ID Added |
Web logs:
Log ID |
Message |
Change |
---|---|---|
12289 |
LOG_ID_WEB_CONTENT_MMS_BANWORD |
Log ID Removed |
12291 |
LOG_ID_WEB_CONTENT_MMS_EXEMPTWORD |
Log ID Removed |
12305 |
LOG_ID_WEB_CONTENT_MMS_BANWORD_NOTIF |
Log ID Removed |
13648 |
LOG_ID_WEB_WF_ANTIPHISH_MATCH_URL_ALLOW |
Log ID Added |
13649 |
LOG_ID_WEB_WF_ANTIPHISH_MATCH_FTGD_ALLOW |
Log ID Added |
13650 |
LOG_ID_WEB_WF_ANTIPHISH_MATCH_DEFAULT_ALLOW |
Log ID Added |
13651 |
LOG_ID_WEB_WF_ANTIPHISH_MATCH_URL_BLOCK |
Log ID Added |
13652 |
LOG_ID_WEB_WF_ANTIPHISH_MATCH_FTGD_BLOCK |
Log ID Added |
13653 |
LOG_ID_WEB_WF_ANTIPHISH_MATCH_DEFAULT_BLOCK |
Log ID Added |