V 2.0 : FortiAnalyzer Event
General Event Log Information
Mapping with LogRhythm Schema
Device Key in Log Message
Records the action taken, if applicable.
The year, month, and day when the event occurred in the format: YY-MM-DD.
The hour, minute, and second of when the event occurred.
The activity or event recorded by the FortiAnalyzer unit.
An identification number for the device that recorded the event.
The year, month, and day when the event occurred in the format: YY-MM-DD. It also includes the hour, minute, and second of when the event occurred.
A ten-digit number that identifies the log type. The first two digits represent the log type, and the following two digits represent the log subtype. The last six digits represent the message ID number.
The severity level or priority of the event. There are several severity or priority levels.
A description of the activity or event recorded by the FortiAnalyzer unit.
The subtype of each log message.
The section of the system where the event occurred.
The name of the user creating the traffic.
Where the user initiated the activity or event, if applicable.