Syslog Fortinet FortiGate - V 2.0 : UTM : Emailfilter
Vendor Documentation
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
V 2.0 : UTM : Emailfilter | Base Rule | Email Filter Information | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
---|---|---|---|
logver | <version> | Number | N/A |
timestamp | N/A | N/A | N/A |
devname | N/A | N/A | N/A |
devid | N/A | N/A | N/A |
vd | <sessiontype> | Text/String | N/A |
date | N/A | N/A | N/A |
time | N/A | N/A | N/A |
eventtime | N/A | N/A | N/A |
tz | N/A | N/A | N/A |
logid | <vmid> | Number | N/A |
type | <vendorinfo> | Text/String | N/A |
subtype | N/A | N/A | N/A |
eventtype | N/A | N/A | N/A |
level | <severity> | Text/String | N/A |
policyid | <policy> | Number | N/A |
poluuid | N/A | N/A | N/A |
policytype | N/A | N/A | N/A |
sessionid | <session> | Number | N/A |
srcip | <sip> | IP Address | N/A |
srcport | <sport> | Number | N/A |
srccountry | N/A | N/A | N/A |
srcintf | <sinterface> | Text/String | N/A |
srcintfrole | N/A | N/A | N/A |
srcuuid | N/A | N/A | N/A |
dstip | <dip> | IP Address | N/A |
dstport | <dport> | Number | N/A |
dstcountry | N/A | N/A | N/A |
dstintf | <dinterface> | Text/String | N/A |
dstintfrole | N/A | N/A | N/A |
dstuuid | N/A | N/A | N/A |
proto | <protnum> | Number | N/A |
service | <protname> | Text/String | N/A |
profile | N/A | N/A | N/A |
action | <action> | Text/String | N/A |
from | N/A | N/A | N/A |
to | N/A | N/A | N/A |
sender | <sender> | Text/String | N/A |
recipient | <recipient> | Text/String | N/A |
direction | N/A | N/A | N/A |
subject | <subject> | Text/String | N/A |
size | <size> | Number | N/A |