Syslog Fortinet FortiGate - V 2.0 : Event : Connector

https://docs.fortinet.com/document/fortigate/7.0.12/administration-guide/986892/sample-logs-by-log-type

V 2.0 : Event : Connector

Base Rule

General Firewall Event

Information

V 2.0 : LOG_ID_CONNECTOR_OBJECT_ADD

Sub Rule

Object Added

Access Success

V 2.0 : LOG_ID_CONNECTOR_OBJECT_REMOVE

Sub Rule

Object Deleted/Removed

Access Success

V 2.0 : LOG_ID_CONNECTOR_API_FAILED

Sub Rule

General Failed Activity

Failed Activity

V 2.0 : LOG_ID_CONNECTOR_OBJECT_UPDATE

Sub Rule

Object Modified

Access Success

V 2.0 : LOG_ID_CONNECTOR_OBJECT_CANT_ADD

Sub Rule

Add Object Failure

Access Failure

V 2.0 : LOG_ID_CONNECTOR_OBJECT_CANT_REMOVE

Sub Rule

Delete/Remove Object Failure

Access Failure

date

N/A

N/A

The date of the log event.

time

N/A

N/A

The time of the log event.

logid

<vmid>

Number

A unique identifier for the log event.

type

<vendorinfo>

Text/String

The type of log event. In this case, it is an event.

subtype

N/A

N/A

The subtype of the log event. In this case, it is a connector event.

level

<severity>

Text/String

The severity level of the log event. In this case, it is an information.

vd

<sessiontype>

Text/String

The vdom in which the log event occurred.

eventtime

N/A

N/A

The time at which the log event occurred.

logdesc

N/A

N/A

The description of the log event.

cfgobj

<object>

Text/String

The configuration object that was added.

action

<action>
<tag1>

Text/String

The action that was taken. In this case, it was an object-add.

addr

<sip>

IP Address

The IP address that was added.

cldobjid

N/A

N/A

The cloud object ID of the IP address.

netid

N/A

N/A

The network ID of the IP address.

msg

<subject>

Text/String

The message associated with the log event.