Fortinet black logo

New Features

SD-WAN log format improvements

Copy Link
Copy Doc ID de1e129a-0283-11ea-8977-00505692583a:186460
Download PDF

SD-WAN log format improvements

The SD-WAN log format has been improved for better reporting and event handler creation on FortiAnalzyer.

Sample logs

The following sample logs identify where the improvements were made to the log format.

Service field

The service field only includes the service name. The service ID was removed from the service field and added to a new field named serviceid.

Old Format

date=2019-11-05 time=12:11:16 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569438676644424772 tz="-0700" logdesc="Virtual WAN Link status" eventtype="Service" service="1(gmail)" msg="Service prioritized by latency will be redirected in seq-num order 1(lan2) 2(wan1)"

New format

date=2020-02-04 time=15:24:23 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580858663336645512 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" serviceid=1 service="gmail" metric="latency" seq="2,1" msg="Service prioritized by performance metric will be redirected in sequence order."

Name field

The name field has been replaced with the more specific healthcheck field to be consistent with other logs and to reduce confusion.

Old format

date=2019-11-03 time=17:13:28 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569284008246643001 tz="-0700" logdesc="Virtual WAN Link SLA information" eventtype="SLA" name="test" interface="lan2" status="down" latency="0.000" jitter="0.000" packetloss="85.000%" inbandwidth="0kbps" outbandwidth="0kbps" bibandwidth="0kbps" slamap="0x0" msg="Health Check SLA status. SLA 1 failed due to being over the packetloss threshold "

New format

date=2020-02-04 time=14:39:08 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580855948407682526 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="SLA" healthcheck="ping1" slatargetid=1 interface="R160" status="up" latency="0.010" jitter="0.000" packetloss="21.000%" inbandwidth="0kbps" outbandwidth="0kbps" bibandwidth="0kbps" slamap="0x0" metric="packetloss" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold."

Old format

date=2019-11-06 time=17:26:12 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569543972762277480 tz="-0700" logdesc="Virtual WAN Link SLA information" eventtype="Health Check" name="test-1-VIRTUAL_WAN_LINK-1" interface="lan2" probeproto="ping" oldstate="die" newstate="alive" msg="SD-WAN health-check member changed state"

New format

date=2020-02-04 time=14:14:42 logid="0113022925" type="event" subtype="sdwan" level="warning" vd="root" eventtime=1580854483005525076 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="Health Check" healthcheck="ping1-2-VIRTUAL_WAN_LINK-2" interface="R160" probeproto="ping" oldvalue="alive" newvalue="die" msg="SD-WAN health-check member changed state."

SLA field

The sla field has been replaced with the more specific slatargetid field.

Old format

date=2019-11-06 time=16:51:05 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1573087865540014616 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping2" sla="22" oldpassmember="2" newpassmember="1" msg="Number of pass members changed. Member 2 out-of-sla"

New format

date=2020-02-04 time=14:38:16 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580855896895319923 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 oldvalue="2" newvalue="1" msg="Number of pass member changed." date=2020-02-04 time=14:38:16 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580855896895316020 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 member="2" msg="Member status changed. Member out-of-sla."

SLA ID

The SLA ID was moved from the msg field and added to the new slatargetid field. The SLA values were also removed from the msg field. There is now one log for each SLA failure.

Old format

date=2019-12-06 time=10:19:53 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1575656393121996604 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="SLA" name="1" interface="port1" status="up" latency="0.092" jitter="0.006" packetloss="0.000%" inbandwidth="99.98Mbps" outbandwidth="99.99Mbps" bibandwidth="199.97Mbps" slamap="0x0" msg="Health Check SLA status. SLA 1 failed due to being over the latency threshold SLA 2 failed due to being over the jitter threshold"

New format

date=2020-02-05 time=15:56:27 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580946987433804652 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="SLA" healthcheck="ping1" slatargetid=2 interface="R160" status="up" latency="3.012" jitter="1.002" packetloss="43.000%" inbandwidth="0kbps" outbandwidth="0kbps" bibandwidth="0kbps" slamap="0x0" metric="latency" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold." date=2020-02-05 time=15:56:27 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580946987433799366 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="SLA" healthcheck="ping1" slatargetid=1 interface="R160" status="up" latency="3.012" jitter="1.002" packetloss="43.000%" inbandwidth="0kbps" outbandwidth="0kbps" bibandwidth="0kbps" slamap="0x0" metric="jitter" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold."

Old and new value fields

The old and new value field types have been replaced with the oldvalue and newvalue fields since the field values are meaningful enough to cover different log types.

Old format

date=2019-11-05 time=15:08:07 logid="0113022927" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569449287861854771 tz="-0700" logdesc="Virtual WAN Link Neighbor standalone" eventtype="Neighbor" oldselectedrole="primary" newselectedrole="standalone" msg="Selected role is changed."

New format

date=2020-02-04 time=17:09:57 logid="0113022927" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580864997042080958 tz="-0800" logdesc="Virtual WAN Link Neighbor standalone" eventtype="Neighbor" oldvalue="primary" newvalue="standalone" msg="Selected role is changed."

Old format

date=2019-11-06 time=16:51:05 logid="0113022925" type="event" subtype="sdwan" level="warning" vd="root" eventtime=1573087865315149386 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="Health Check" name="test2-2-VIRTUAL_WAN_LINK-2" interface="port15" probeproto="ping" oldstate="alive" newstate="die" msg="SD-WAN health-check member changed state"

New format

date=2020-02-04 time=14:14:42 logid="0113022925" type="event" subtype="sdwan" level="warning" vd="root" eventtime=1580854483005525076 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="Health Check" healthcheck="ping1-2-VIRTUAL_WAN_LINK-2" interface="R160" probeproto="ping" oldvalue="alive" newvalue="die" msg="SD-WAN health-check member changed state."

Old format

date=2019-11-04 time=17:28:11 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569371291676959641 tz="-0700" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="test" sla="1" oldpassmember="1" newpassmember="0" msg="Number of pass members changed. Member 2 out-of-sla"

New format

date=2020-02-04 time=17:17:34 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580865454841077461 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 oldvalue="2" newvalue="1" msg="Number of pass member changed." date=2020-02-04 time=17:17:34 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580865454841074245 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 member="1" msg="Member status changed. Member out-of-sla."

Network performance metrics

The latency, jitter, and packet loss network performance metrics were removed from the msg field and moved to a new field named metric. The cause factor has also been removed from the msg field.

Old format

date=2019-11-05 time=16:22:00 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1572999721054428968 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" service="2(rule12)" msg="Service prioritized by latency will be redirected in seq-num order 2(port15) 1(port13)."

New format

date=2020-02-04 time=15:24:23 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580858663336645512 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" serviceid=1 service="gmail" metric="latency" seq="2,1" msg="Service prioritized by performance metric will be redirected in sequence order."

Old format

date=2019-11-05 time=12:11:16 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569438676644407292 tz="-0700" logdesc="Virtual WAN Link status" eventtype="Service" interface="wan1" member="2" service="1(gmail)" msg="The member link quality latency order changed from 1 to 2."

New format

date=2020-02-04 time=15:40:48 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580859648553624138 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" interface="R160" member="2" serviceid=1 service="gmail" gateway="10.100.1.5" metric="packet-loss" oldvalue="1" newvalue="2" msg="The member order changed by performance metric."

Gateway address

The gateway address has been removed from the msg field and added to a new field named gateway.

Old format

date=2019-11-07 time=07:49:58 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569595798367258194 tz="-0700" logdesc="Virtual WAN Link status" eventtype="Service" interface="wan1" member="2" service="2(is)" msg="Member link is available. Start forwarding traffic. Service will be redirected to interface(wan1) gateway(172.18.45.1)"

New format

date=2020-02-04 time=15:39:04 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580859544464985538 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" interface="R160" member="2" serviceid=2 service="google-isdb" gateway="10.100.1.5" msg="Member link is available. Start forwarding traffic. "

Seq-num order

The seq-num order was removed from the msg field and added to the new field named seq. The order values were also removed from the msg field.

Old format

date=2019-11-05 time=16:22:00 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1572999721054428968 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" service="2(rule12)" msg="Service prioritized by latency will be redirected in seq-num order 2(port15) 1(port13)"

New format

date=2020-02-04 time=15:39:04 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580859544464944421 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" serviceid=1 service="gmail" metric="latency" seq="2,1" msg="Service prioritized by performance metric will be redirected in sequence order."

Member value

The member value was removed from the msg field and added to the member field. There is now one log for each changed member and another log for how the pass member changed.

Old format

date=2019-12-11 time=14:47:40 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1576104460831070527 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="test" sla="22" oldpassmember="2" newpassmember="1" msg="Number of pass members changed. Member 2 out-of-sla"

New format

date=2020-02-04 time=17:17:34 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580865454841077461 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 oldvalue="2" newvalue="1" msg="Number of pass member changed." date=2020-02-04 time=17:17:34 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580865454841074245 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 member="1" msg="Member status changed. Member out-of-sla."

SD-WAN log format improvements

The SD-WAN log format has been improved for better reporting and event handler creation on FortiAnalzyer.

Sample logs

The following sample logs identify where the improvements were made to the log format.

Service field

The service field only includes the service name. The service ID was removed from the service field and added to a new field named serviceid.

Old Format

date=2019-11-05 time=12:11:16 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569438676644424772 tz="-0700" logdesc="Virtual WAN Link status" eventtype="Service" service="1(gmail)" msg="Service prioritized by latency will be redirected in seq-num order 1(lan2) 2(wan1)"

New format

date=2020-02-04 time=15:24:23 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580858663336645512 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" serviceid=1 service="gmail" metric="latency" seq="2,1" msg="Service prioritized by performance metric will be redirected in sequence order."

Name field

The name field has been replaced with the more specific healthcheck field to be consistent with other logs and to reduce confusion.

Old format

date=2019-11-03 time=17:13:28 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569284008246643001 tz="-0700" logdesc="Virtual WAN Link SLA information" eventtype="SLA" name="test" interface="lan2" status="down" latency="0.000" jitter="0.000" packetloss="85.000%" inbandwidth="0kbps" outbandwidth="0kbps" bibandwidth="0kbps" slamap="0x0" msg="Health Check SLA status. SLA 1 failed due to being over the packetloss threshold "

New format

date=2020-02-04 time=14:39:08 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580855948407682526 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="SLA" healthcheck="ping1" slatargetid=1 interface="R160" status="up" latency="0.010" jitter="0.000" packetloss="21.000%" inbandwidth="0kbps" outbandwidth="0kbps" bibandwidth="0kbps" slamap="0x0" metric="packetloss" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold."

Old format

date=2019-11-06 time=17:26:12 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569543972762277480 tz="-0700" logdesc="Virtual WAN Link SLA information" eventtype="Health Check" name="test-1-VIRTUAL_WAN_LINK-1" interface="lan2" probeproto="ping" oldstate="die" newstate="alive" msg="SD-WAN health-check member changed state"

New format

date=2020-02-04 time=14:14:42 logid="0113022925" type="event" subtype="sdwan" level="warning" vd="root" eventtime=1580854483005525076 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="Health Check" healthcheck="ping1-2-VIRTUAL_WAN_LINK-2" interface="R160" probeproto="ping" oldvalue="alive" newvalue="die" msg="SD-WAN health-check member changed state."

SLA field

The sla field has been replaced with the more specific slatargetid field.

Old format

date=2019-11-06 time=16:51:05 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1573087865540014616 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping2" sla="22" oldpassmember="2" newpassmember="1" msg="Number of pass members changed. Member 2 out-of-sla"

New format

date=2020-02-04 time=14:38:16 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580855896895319923 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 oldvalue="2" newvalue="1" msg="Number of pass member changed." date=2020-02-04 time=14:38:16 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580855896895316020 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 member="2" msg="Member status changed. Member out-of-sla."

SLA ID

The SLA ID was moved from the msg field and added to the new slatargetid field. The SLA values were also removed from the msg field. There is now one log for each SLA failure.

Old format

date=2019-12-06 time=10:19:53 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1575656393121996604 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="SLA" name="1" interface="port1" status="up" latency="0.092" jitter="0.006" packetloss="0.000%" inbandwidth="99.98Mbps" outbandwidth="99.99Mbps" bibandwidth="199.97Mbps" slamap="0x0" msg="Health Check SLA status. SLA 1 failed due to being over the latency threshold SLA 2 failed due to being over the jitter threshold"

New format

date=2020-02-05 time=15:56:27 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580946987433804652 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="SLA" healthcheck="ping1" slatargetid=2 interface="R160" status="up" latency="3.012" jitter="1.002" packetloss="43.000%" inbandwidth="0kbps" outbandwidth="0kbps" bibandwidth="0kbps" slamap="0x0" metric="latency" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold." date=2020-02-05 time=15:56:27 logid="0113022925" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580946987433799366 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="SLA" healthcheck="ping1" slatargetid=1 interface="R160" status="up" latency="3.012" jitter="1.002" packetloss="43.000%" inbandwidth="0kbps" outbandwidth="0kbps" bibandwidth="0kbps" slamap="0x0" metric="jitter" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold."

Old and new value fields

The old and new value field types have been replaced with the oldvalue and newvalue fields since the field values are meaningful enough to cover different log types.

Old format

date=2019-11-05 time=15:08:07 logid="0113022927" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569449287861854771 tz="-0700" logdesc="Virtual WAN Link Neighbor standalone" eventtype="Neighbor" oldselectedrole="primary" newselectedrole="standalone" msg="Selected role is changed."

New format

date=2020-02-04 time=17:09:57 logid="0113022927" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580864997042080958 tz="-0800" logdesc="Virtual WAN Link Neighbor standalone" eventtype="Neighbor" oldvalue="primary" newvalue="standalone" msg="Selected role is changed."

Old format

date=2019-11-06 time=16:51:05 logid="0113022925" type="event" subtype="sdwan" level="warning" vd="root" eventtime=1573087865315149386 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="Health Check" name="test2-2-VIRTUAL_WAN_LINK-2" interface="port15" probeproto="ping" oldstate="alive" newstate="die" msg="SD-WAN health-check member changed state"

New format

date=2020-02-04 time=14:14:42 logid="0113022925" type="event" subtype="sdwan" level="warning" vd="root" eventtime=1580854483005525076 tz="-0800" logdesc="Virtual WAN Link SLA information" eventtype="Health Check" healthcheck="ping1-2-VIRTUAL_WAN_LINK-2" interface="R160" probeproto="ping" oldvalue="alive" newvalue="die" msg="SD-WAN health-check member changed state."

Old format

date=2019-11-04 time=17:28:11 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569371291676959641 tz="-0700" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="test" sla="1" oldpassmember="1" newpassmember="0" msg="Number of pass members changed. Member 2 out-of-sla"

New format

date=2020-02-04 time=17:17:34 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580865454841077461 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 oldvalue="2" newvalue="1" msg="Number of pass member changed." date=2020-02-04 time=17:17:34 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580865454841074245 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 member="1" msg="Member status changed. Member out-of-sla."

Network performance metrics

The latency, jitter, and packet loss network performance metrics were removed from the msg field and moved to a new field named metric. The cause factor has also been removed from the msg field.

Old format

date=2019-11-05 time=16:22:00 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1572999721054428968 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" service="2(rule12)" msg="Service prioritized by latency will be redirected in seq-num order 2(port15) 1(port13)."

New format

date=2020-02-04 time=15:24:23 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580858663336645512 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" serviceid=1 service="gmail" metric="latency" seq="2,1" msg="Service prioritized by performance metric will be redirected in sequence order."

Old format

date=2019-11-05 time=12:11:16 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569438676644407292 tz="-0700" logdesc="Virtual WAN Link status" eventtype="Service" interface="wan1" member="2" service="1(gmail)" msg="The member link quality latency order changed from 1 to 2."

New format

date=2020-02-04 time=15:40:48 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580859648553624138 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" interface="R160" member="2" serviceid=1 service="gmail" gateway="10.100.1.5" metric="packet-loss" oldvalue="1" newvalue="2" msg="The member order changed by performance metric."

Gateway address

The gateway address has been removed from the msg field and added to a new field named gateway.

Old format

date=2019-11-07 time=07:49:58 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1569595798367258194 tz="-0700" logdesc="Virtual WAN Link status" eventtype="Service" interface="wan1" member="2" service="2(is)" msg="Member link is available. Start forwarding traffic. Service will be redirected to interface(wan1) gateway(172.18.45.1)"

New format

date=2020-02-04 time=15:39:04 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580859544464985538 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" interface="R160" member="2" serviceid=2 service="google-isdb" gateway="10.100.1.5" msg="Member link is available. Start forwarding traffic. "

Seq-num order

The seq-num order was removed from the msg field and added to the new field named seq. The order values were also removed from the msg field.

Old format

date=2019-11-05 time=16:22:00 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1572999721054428968 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" service="2(rule12)" msg="Service prioritized by latency will be redirected in seq-num order 2(port15) 1(port13)"

New format

date=2020-02-04 time=15:39:04 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580859544464944421 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Service" serviceid=1 service="gmail" metric="latency" seq="2,1" msg="Service prioritized by performance metric will be redirected in sequence order."

Member value

The member value was removed from the msg field and added to the member field. There is now one log for each changed member and another log for how the pass member changed.

Old format

date=2019-12-11 time=14:47:40 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1576104460831070527 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="test" sla="22" oldpassmember="2" newpassmember="1" msg="Number of pass members changed. Member 2 out-of-sla"

New format

date=2020-02-04 time=17:17:34 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580865454841077461 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 oldvalue="2" newvalue="1" msg="Number of pass member changed." date=2020-02-04 time=17:17:34 logid="0113022923" type="event" subtype="sdwan" level="notice" vd="root" eventtime=1580865454841074245 tz="-0800" logdesc="Virtual WAN Link status" eventtype="Health Check" healthcheck="ping1" slatargetid=1 member="1" msg="Member status changed. Member out-of-sla."