Gateway Logs

Vendor Documentation

https://www.fortinet.com/products.html

https://docs.fortinet.com/document/fortigate/6.0.6/fortios-log-message-reference/524940/introduction

Classification

Rule Name	Rule Type	Classification	Common Event
Gateway Logs	Base Rule	Information	General Information
DHCP Messages	Sub Rule	Information	DHCP Lease Obtained

Mapping with LogRhythm Schema

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
severity	<severity>	Text/String	severity
logver	<version>	Text/String/Number	N/A
devname	<dname>	Text/String	N/A
devid	<login>	Text/String	N/A
logid	<vmid> <tag1>	Number	N/A
level	<severity>	Text/String	severity
vd	<domainorigin>	Text/String	N/A
msg	<subject>	Text/String	N/A
sip	<sip>	IP Address	IP Address
gateway	<dip>	IP Address	IP Address