Syslog Fortinet FortiGate - V 2.0 : UTM : File-Filter

Vendor Documentation

Rule Name	Rule Type	Common Event	Classification
V 2.0 : UTM : File-Filter	Base Rule	General Firewall Event	Information

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
date	N/A	N/A	N/A
time	N/A	N/A	N/A
logid	<vmid>	Number	N/A
type	<vendorinfo>	Text/String	N/A
subtype	N/A	N/A	N/A
eventtype	N/A	N/A	N/A
level	<severity>	Text/String	N/A
vd	<sessiontype>	Text/String	N/A
eventtime	N/A	N/A	N/A
tz	N/A	N/A	N/A
policyid	<policy>	Number	N/A
sessionid	<session>	Number	N/A
srcip	<sip>	IP Address	N/A
srcport	<sport>	Number	N/A
srcintf	<sinterface>	Text/String	N/A
srcintfrole	N/A	N/A	N/A
dstip	<dip>	IP Address	N/A
dstport	<dport>	Number	N/A
dstintf	<dinterface>	Text/String	N/A
dstintfrole	N/A	N/A	N/A
proto	<protnum>	Number	N/A
service	<protname>	Text/String	N/A
profile	N/A	N/A	N/A
direction	N/A	N/A	N/A
action	<action>	Text/String	N/A
rulename	N/A	N/A	N/A
filename	<object>	Text/String	N/A
filesize	<size>	Number	N/A
filetype	<objecttype>	Text/String	N/A
msg	<subject>	Text/String	N/A
group	<group>	Text/String	N/A
url	<url>	Text/String	N/A
hostname	<dname>	Text/String	N/A
agent	<useragent>	Text/String	N/A
filtername	N/A	N/A	N/A
matchfilename	N/A	N/A	N/A
matchfiletype	N/A	N/A	N/A