^date=\d{4}-\d{2}-\d{2}\s+time=\d{2}:\d{2}:\d{2}\s+devname="[^"]*"\s+devid="[^"]*"\s+eventtime=\d+\s+tz="[^"]*"\s+logid="\d+" fortinet-fortigate-firewall devname="(\.*)"|devname=(\.*)\s|devname=(\.*)$ devname fortinet-fortigate-firewall \s+accessctrl="(\.*)"|\s+accessctrl=(\.*)\s|\s+accessctrl=(\.*)$ accessctrl fortinet-fortigate-firewall \s+accessproxy="(\.*)"|\s+accessproxy=(\.*)\s|\s+accessproxy=(\.*)$ accessproxy fortinet-fortigate-firewall \s+acct_stat="(\.*)"|\s+acct_stat=(\.*)\s|\s+acct_stat=(\.*)$ acct_stat fortinet-fortigate-firewall \s+acktime="(\.*)"|\s+acktime=(\.*)\s|\s+acktime=(\.*)$ acktime fortinet-fortigate-firewall \s+act="(\.*)"|\s+act=(\.*)\s|\s+act=(\.*)$ act fortinet-fortigate-firewall \s+action="(\.*)"|\s+action=(\.*)\s|\s+action=(\.*)$ action fortinet-fortigate-firewall \s+activity="(\.*)"|\s+activity=(\.*)\s|\s+activity=(\.*)$ activity fortinet-fortigate-firewall \s+activitycategory="(\.*)"|\s+activitycategory=(\.*)\s|\s+activitycategory=(\.*)$ activitycategory fortinet-fortigate-firewall \s+addr="(\.*)"|\s+addr=(\.*)\s|\s+addr=(\.*)$ addr fortinet-fortigate-firewall \s+addr_type="(\.*)"|\s+addr_type=(\.*)\s|\s+addr_type=(\.*)$ addr_type fortinet-fortigate-firewall \s+addrgrp="(\.*)"|\s+addrgrp=(\.*)\s|\s+addrgrp=(\.*)$ addrgrp fortinet-fortigate-firewall \s+adgroup="(\.*)"|\s+adgroup=(\.*)\s|\s+adgroup=(\.*)$ adgroup fortinet-fortigate-firewall \s+admin="(\.*)"|\s+admin=(\.*)\s|\s+admin=(\.*)$ admin fortinet-fortigate-firewall \s+advpnsc="(\.*)"|\s+advpnsc=(\.*)\s|\s+advpnsc=(\.*)$ advpnsc fortinet-fortigate-firewall \s+age="(\.*)"|\s+age=(\.*)\s|\s+age=(\.*)$ age fortinet-fortigate-firewall \s+agent="(\.*)"|\s+agent=(\.*)\s|\s+agent=(\.*)$ agent fortinet-fortigate-firewall \s+alarmid="(\.*)"|\s+alarmid=(\.*)\s|\s+alarmid=(\.*)$ alarmid fortinet-fortigate-firewall \s+alert="(\.*)"|\s+alert=(\.*)\s|\s+alert=(\.*)$ alert fortinet-fortigate-firewall \s+analyticscksum="(\.*)"|\s+analyticscksum=(\.*)\s|\s+analyticscksum=(\.*)$ analyticscksum fortinet-fortigate-firewall \s+analyticssubmit="(\.*)"|\s+analyticssubmit=(\.*)\s|\s+analyticssubmit=(\.*)$ analyticssubmit fortinet-fortigate-firewall \s+anomaly="(\.*)"|\s+anomaly=(\.*)\s|\s+anomaly=(\.*)$ anomaly fortinet-fortigate-firewall \s+antiphishdc="(\.*)"|\s+antiphishdc=(\.*)\s|\s+antiphishdc=(\.*)$ antiphishdc fortinet-fortigate-firewall \s+antiphishrule="(\.*)"|\s+antiphishrule=(\.*)\s|\s+antiphishrule=(\.*)$ antiphishrule fortinet-fortigate-firewall \s+ap="(\.*)"|\s+ap=(\.*)\s|\s+ap=(\.*)$ ap fortinet-fortigate-firewall \s+apn="(\.*)"|\s+apn=(\.*)\s|\s+apn=(\.*)$ apn fortinet-fortigate-firewall \s+app="(\.*)"|\s+app=(\.*)\s|\s+app=(\.*)$ app fortinet-fortigate-firewall \s+appact="(\.*)"|\s+appact=(\.*)\s|\s+appact=(\.*)$ appact fortinet-fortigate-firewall \s+appcat="(\.*)"|\s+appcat=(\.*)\s|\s+appcat=(\.*)$ appcat fortinet-fortigate-firewall \s+apperror="(\.*)"|\s+apperror=(\.*)\s|\s+apperror=(\.*)$ apperror fortinet-fortigate-firewall \s+appid="(\.*)"|\s+appid=(\.*)\s|\s+appid=(\.*)$ appid fortinet-fortigate-firewall \s+applist="(\.*)"|\s+applist=(\.*)\s|\s+applist=(\.*)$ applist fortinet-fortigate-firewall \s+apprisk="(\.*)"|\s+apprisk=(\.*)\s|\s+apprisk=(\.*)$ apprisk fortinet-fortigate-firewall \s+apscan="(\.*)"|\s+apscan=(\.*)\s|\s+apscan=(\.*)$ apscan fortinet-fortigate-firewall \s+apsn="(\.*)"|\s+apsn=(\.*)\s|\s+apsn=(\.*)$ apsn fortinet-fortigate-firewall \s+apstatus="(\.*)"|\s+apstatus=(\.*)\s|\s+apstatus=(\.*)$ apstatus fortinet-fortigate-firewall \s+aptype="(\.*)"|\s+aptype=(\.*)\s|\s+aptype=(\.*)$ aptype fortinet-fortigate-firewall \s+assigned="(\.*)"|\s+assigned=(\.*)\s|\s+assigned=(\.*)$ assigned fortinet-fortigate-firewall \s+assignip="(\.*)"|\s+assignip=(\.*)\s|\s+assignip=(\.*)$ assignip fortinet-fortigate-firewall \s+attachment="(\.*)"|\s+attachment=(\.*)\s|\s+attachment=(\.*)$ attachment fortinet-fortigate-firewall \s+attack="(\.*)"|\s+attack=(\.*)\s|\s+attack=(\.*)$ attack fortinet-fortigate-firewall \s+attackcontext="(\.*)"|\s+attackcontext=(\.*)\s|\s+attackcontext=(\.*)$ attackcontext fortinet-fortigate-firewall \s+attackcontextid="(\.*)"|\s+attackcontextid=(\.*)\s|\s+attackcontextid=(\.*)$ attackcontextid fortinet-fortigate-firewall \s+attackid="(\.*)"|\s+attackid=(\.*)\s|\s+attackid=(\.*)$ attackid fortinet-fortigate-firewall \s+auditid="(\.*)"|\s+auditid=(\.*)\s|\s+auditid=(\.*)$ auditid fortinet-fortigate-firewall \s+auditreporttype="(\.*)"|\s+auditreporttype=(\.*)\s|\s+auditreporttype=(\.*)$ auditreporttype fortinet-fortigate-firewall \s+auditscore="(\.*)"|\s+auditscore=(\.*)\s|\s+auditscore=(\.*)$ auditscore fortinet-fortigate-firewall \s+audittime="(\.*)"|\s+audittime=(\.*)\s|\s+audittime=(\.*)$ audittime fortinet-fortigate-firewall \s+authalgo="(\.*)"|\s+authalgo=(\.*)\s|\s+authalgo=(\.*)$ authalgo fortinet-fortigate-firewall \s+authgrp="(\.*)"|\s+authgrp=(\.*)\s|\s+authgrp=(\.*)$ authgrp fortinet-fortigate-firewall \s+authid="(\.*)"|\s+authid=(\.*)\s|\s+authid=(\.*)$ authid fortinet-fortigate-firewall \s+authproto="(\.*)"|\s+authproto=(\.*)\s|\s+authproto=(\.*)$ authproto fortinet-fortigate-firewall \s+authserver="(\.*)"|\s+authserver=(\.*)\s|\s+authserver=(\.*)$ authserver fortinet-fortigate-firewall \s+bandwidth="(\.*)"|\s+bandwidth=(\.*)\s|\s+bandwidth=(\.*)$ bandwidth fortinet-fortigate-firewall \s+banned_rule="(\.*)"|\s+banned_rule=(\.*)\s|\s+banned_rule=(\.*)$ banned_rule fortinet-fortigate-firewall \s+banned_src="(\.*)"|\s+banned_src=(\.*)\s|\s+banned_src=(\.*)$ banned_src fortinet-fortigate-firewall \s+banword="(\.*)"|\s+banword=(\.*)\s|\s+banword=(\.*)$ banword fortinet-fortigate-firewall \s+bibandwidth="(\.*)"|\s+bibandwidth=(\.*)\s|\s+bibandwidth=(\.*)$ bibandwidth fortinet-fortigate-firewall \s+bibandwidthavailable="(\.*)"|\s+bibandwidthavailable=(\.*)\s|\s+bibandwidthavailable=(\.*)$ bibandwidthavailable fortinet-fortigate-firewall \s+bibandwidthused="(\.*)"|\s+bibandwidthused=(\.*)\s|\s+bibandwidthused=(\.*)$ bibandwidthused fortinet-fortigate-firewall \s+botnetdomain="(\.*)"|\s+botnetdomain=(\.*)\s|\s+botnetdomain=(\.*)$ botnetdomain fortinet-fortigate-firewall \s+botnetip="(\.*)"|\s+botnetip=(\.*)\s|\s+botnetip=(\.*)$ botnetip fortinet-fortigate-firewall \s+bssid="(\.*)"|\s+bssid=(\.*)\s|\s+bssid=(\.*)$ bssid fortinet-fortigate-firewall \s+call_id="(\.*)"|\s+call_id=(\.*)\s|\s+call_id=(\.*)$ call_id fortinet-fortigate-firewall \s+carrier_ep="(\.*)"|\s+carrier_ep=(\.*)\s|\s+carrier_ep=(\.*)$ carrier_ep fortinet-fortigate-firewall \s+casb="(\.*)"|\s+casb=(\.*)\s|\s+casb=(\.*)$ casb fortinet-fortigate-firewall \s+cat="(\.*)"|\s+cat=(\.*)\s|\s+cat=(\.*)$ cat fortinet-fortigate-firewall \s+catdesc="(\.*)"|\s+catdesc=(\.*)\s|\s+catdesc=(\.*)$ catdesc fortinet-fortigate-firewall \s+category="(\.*)"|\s+category=(\.*)\s|\s+category=(\.*)$ category fortinet-fortigate-firewall \s+cc="(\.*)"|\s+cc=(\.*)\s|\s+cc=(\.*)$ cc fortinet-fortigate-firewall \s+ccertissuer="(\.*)"|\s+ccertissuer=(\.*)\s|\s+ccertissuer=(\.*)$ ccertissuer fortinet-fortigate-firewall \s+cdrcontent="(\.*)"|\s+cdrcontent=(\.*)\s|\s+cdrcontent=(\.*)$ cdrcontent fortinet-fortigate-firewall \s+centralnatid="(\.*)"|\s+centralnatid=(\.*)\s|\s+centralnatid=(\.*)$ centralnatid fortinet-fortigate-firewall \s+cert="(\.*)"|\s+cert=(\.*)\s|\s+cert=(\.*)$ cert fortinet-fortigate-firewall \s+certdesc="(\.*)"|\s+certdesc=(\.*)\s|\s+certdesc=(\.*)$ certdesc fortinet-fortigate-firewall \s+certhash="(\.*)"|\s+certhash=(\.*)\s|\s+certhash=(\.*)$ certhash fortinet-fortigate-firewall \s+cfgattr="(\.*)"|\s+cfgattr=(\.*)\s|\s+cfgattr=(\.*)$ cfgattr fortinet-fortigate-firewall \s+cfgobj="(\.*)"|\s+cfgobj=(\.*)\s|\s+cfgobj=(\.*)$ cfgobj fortinet-fortigate-firewall \s+cfgpath="(\.*)"|\s+cfgpath=(\.*)\s|\s+cfgpath=(\.*)$ cfgpath fortinet-fortigate-firewall \s+cfgtid="(\.*)"|\s+cfgtid=(\.*)\s|\s+cfgtid=(\.*)$ cfgtid fortinet-fortigate-firewall \s+cfgtxpower="(\.*)"|\s+cfgtxpower=(\.*)\s|\s+cfgtxpower=(\.*)$ cfgtxpower fortinet-fortigate-firewall \s+cfseid="(\.*)"|\s+cfseid=(\.*)\s|\s+cfseid=(\.*)$ cfseid fortinet-fortigate-firewall \s+cfseidaddr="(\.*)"|\s+cfseidaddr=(\.*)\s|\s+cfseidaddr=(\.*)$ cfseidaddr fortinet-fortigate-firewall \s+cggsn="(\.*)"|\s+cggsn=(\.*)\s|\s+cggsn=(\.*)$ cggsn fortinet-fortigate-firewall \s+cgsn="(\.*)"|\s+cgsn=(\.*)\s|\s+cgsn=(\.*)$ cgsn fortinet-fortigate-firewall \s+channel="(\.*)"|\s+channel=(\.*)\s|\s+channel=(\.*)$ channel fortinet-fortigate-firewall \s+channeltype="(\.*)"|\s+channeltype=(\.*)\s|\s+channeltype=(\.*)$ channeltype fortinet-fortigate-firewall \s+chassisid="(\.*)"|\s+chassisid=(\.*)\s|\s+chassisid=(\.*)$ chassisid fortinet-fortigate-firewall \s+checksum="(\.*)"|\s+checksum=(\.*)\s|\s+checksum=(\.*)$ checksum fortinet-fortigate-firewall \s+chgheaders="(\.*)"|\s+chgheaders=(\.*)\s|\s+chgheaders=(\.*)$ chgheaders fortinet-fortigate-firewall \s+cipher="(\.*)"|\s+cipher=(\.*)\s|\s+cipher=(\.*)$ cipher fortinet-fortigate-firewall \s+clashtunnelidx="(\.*)"|\s+clashtunnelidx=(\.*)\s|\s+clashtunnelidx=(\.*)$ clashtunnelidx fortinet-fortigate-firewall \s+cldobjid="(\.*)"|\s+cldobjid=(\.*)\s|\s+cldobjid=(\.*)$ cldobjid fortinet-fortigate-firewall \s+client_addr="(\.*)"|\s+client_addr=(\.*)\s|\s+client_addr=(\.*)$ client_addr fortinet-fortigate-firewall \s+clientcert="(\.*)"|\s+clientcert=(\.*)\s|\s+clientcert=(\.*)$ clientcert fortinet-fortigate-firewall \s+clientdeviceems="(\.*)"|\s+clientdeviceems=(\.*)\s|\s+clientdeviceems=(\.*)$ clientdeviceems fortinet-fortigate-firewall \s+clientdeviceid="(\.*)"|\s+clientdeviceid=(\.*)\s|\s+clientdeviceid=(\.*)$ clientdeviceid fortinet-fortigate-firewall \s+clientdevicemanageable="(\.*)"|\s+clientdevicemanageable=(\.*)\s|\s+clientdevicemanageable=(\.*)$ clientdevicemanageable fortinet-fortigate-firewall \s+clientdeviceowner="(\.*)"|\s+clientdeviceowner=(\.*)\s|\s+clientdeviceowner=(\.*)$ clientdeviceowner fortinet-fortigate-firewall \s+clientdevicetags="(\.*)"|\s+clientdevicetags=(\.*)\s|\s+clientdevicetags=(\.*)$ clientdevicetags fortinet-fortigate-firewall \s+cloudaction="(\.*)"|\s+cloudaction=(\.*)\s|\s+cloudaction=(\.*)$ cloudaction fortinet-fortigate-firewall \s+clouddevice="(\.*)"|\s+clouddevice=(\.*)\s|\s+clouddevice=(\.*)$ clouddevice fortinet-fortigate-firewall \s+clouduser="(\.*)"|\s+clouduser=(\.*)\s|\s+clouduser=(\.*)$ clouduser fortinet-fortigate-firewall \s+cmdbpathname="(\.*)"|\s+cmdbpathname=(\.*)\s|\s+cmdbpathname=(\.*)$ cmdbpathname fortinet-fortigate-firewall \s+cmdbtablename="(\.*)"|\s+cmdbtablename=(\.*)\s|\s+cmdbtablename=(\.*)$ cmdbtablename fortinet-fortigate-firewall \s+cn="(\.*)"|\s+cn=(\.*)\s|\s+cn=(\.*)$ cn fortinet-fortigate-firewall \s+column="(\.*)"|\s+column=(\.*)\s|\s+column=(\.*)$ column fortinet-fortigate-firewall \s+command="(\.*)"|\s+command=(\.*)\s|\s+command=(\.*)$ command fortinet-fortigate-firewall \s+comment="(\.*)"|\s+comment=(\.*)\s|\s+comment=(\.*)$ comment fortinet-fortigate-firewall \s+community="(\.*)"|\s+community=(\.*)\s|\s+community=(\.*)$ community fortinet-fortigate-firewall \s+components="(\.*)"|\s+components=(\.*)\s|\s+components=(\.*)$ components fortinet-fortigate-firewall \s+configcountry="(\.*)"|\s+configcountry=(\.*)\s|\s+configcountry=(\.*)$ configcountry fortinet-fortigate-firewall \s+conflictcount="(\.*)"|\s+conflictcount=(\.*)\s|\s+conflictcount=(\.*)$ conflictcount fortinet-fortigate-firewall \s+connection_type="(\.*)"|\s+connection_type=(\.*)\s|\s+connection_type=(\.*)$ connection_type fortinet-fortigate-firewall \s+conserve="(\.*)"|\s+conserve=(\.*)\s|\s+conserve=(\.*)$ conserve fortinet-fortigate-firewall \s+constraint="(\.*)"|\s+constraint=(\.*)\s|\s+constraint=(\.*)$ constraint fortinet-fortigate-firewall \s+contentdisarmed="(\.*)"|\s+contentdisarmed=(\.*)\s|\s+contentdisarmed=(\.*)$ contentdisarmed fortinet-fortigate-firewall \s+contentencoding="(\.*)"|\s+contentencoding=(\.*)\s|\s+contentencoding=(\.*)$ contentencoding fortinet-fortigate-firewall \s+contenttype="(\.*)"|\s+contenttype=(\.*)\s|\s+contenttype=(\.*)$ contenttype fortinet-fortigate-firewall \s+cookies="(\.*)"|\s+cookies=(\.*)\s|\s+cookies=(\.*)$ cookies fortinet-fortigate-firewall \s+core="(\.*)"|\s+core=(\.*)\s|\s+core=(\.*)$ core fortinet-fortigate-firewall \s+count="(\.*)"|\s+count=(\.*)\s|\s+count=(\.*)$ count fortinet-fortigate-firewall \s+countapp="(\.*)"|\s+countapp=(\.*)\s|\s+countapp=(\.*)$ countapp fortinet-fortigate-firewall \s+countav="(\.*)"|\s+countav=(\.*)\s|\s+countav=(\.*)$ countav fortinet-fortigate-firewall \s+countcasb="(\.*)"|\s+countcasb=(\.*)\s|\s+countcasb=(\.*)$ countcasb fortinet-fortigate-firewall \s+countcifs="(\.*)"|\s+countcifs=(\.*)\s|\s+countcifs=(\.*)$ countcifs fortinet-fortigate-firewall \s+countdlp="(\.*)"|\s+countdlp=(\.*)\s|\s+countdlp=(\.*)$ countdlp fortinet-fortigate-firewall \s+countdns="(\.*)"|\s+countdns=(\.*)\s|\s+countdns=(\.*)$ countdns fortinet-fortigate-firewall \s+countemail="(\.*)"|\s+countemail=(\.*)\s|\s+countemail=(\.*)$ countemail fortinet-fortigate-firewall \s+countff="(\.*)"|\s+countff=(\.*)\s|\s+countff=(\.*)$ countff fortinet-fortigate-firewall \s+counticap="(\.*)"|\s+counticap=(\.*)\s|\s+counticap=(\.*)$ counticap fortinet-fortigate-firewall \s+countips="(\.*)"|\s+countips=(\.*)\s|\s+countips=(\.*)$ countips fortinet-fortigate-firewall \s+countsctpf="(\.*)"|\s+countsctpf=(\.*)\s|\s+countsctpf=(\.*)$ countsctpf fortinet-fortigate-firewall \s+countssh="(\.*)"|\s+countssh=(\.*)\s|\s+countssh=(\.*)$ countssh fortinet-fortigate-firewall \s+countssl="(\.*)"|\s+countssl=(\.*)\s|\s+countssl=(\.*)$ countssl fortinet-fortigate-firewall \s+countvpatch="(\.*)"|\s+countvpatch=(\.*)\s|\s+countvpatch=(\.*)$ countvpatch fortinet-fortigate-firewall \s+countwaf="(\.*)"|\s+countwaf=(\.*)\s|\s+countwaf=(\.*)$ countwaf fortinet-fortigate-firewall \s+countweb="(\.*)"|\s+countweb=(\.*)\s|\s+countweb=(\.*)$ countweb fortinet-fortigate-firewall \s+countztna="(\.*)"|\s+countztna=(\.*)\s|\s+countztna=(\.*)$ countztna fortinet-fortigate-firewall \s+cpaddr="(\.*)"|\s+cpaddr=(\.*)\s|\s+cpaddr=(\.*)$ cpaddr fortinet-fortigate-firewall \s+cpdladdr="(\.*)"|\s+cpdladdr=(\.*)\s|\s+cpdladdr=(\.*)$ cpdladdr fortinet-fortigate-firewall \s+cpdlisraddr="(\.*)"|\s+cpdlisraddr=(\.*)\s|\s+cpdlisraddr=(\.*)$ cpdlisraddr fortinet-fortigate-firewall \s+cpdlisrteid="(\.*)"|\s+cpdlisrteid=(\.*)\s|\s+cpdlisrteid=(\.*)$ cpdlisrteid fortinet-fortigate-firewall \s+cpdlteid="(\.*)"|\s+cpdlteid=(\.*)\s|\s+cpdlteid=(\.*)$ cpdlteid fortinet-fortigate-firewall \s+cpteid="(\.*)"|\s+cpteid=(\.*)\s|\s+cpteid=(\.*)$ cpteid fortinet-fortigate-firewall \s+cpu="(\.*)"|\s+cpu=(\.*)\s|\s+cpu=(\.*)$ cpu fortinet-fortigate-firewall \s+cpuladdr="(\.*)"|\s+cpuladdr=(\.*)\s|\s+cpuladdr=(\.*)$ cpuladdr fortinet-fortigate-firewall \s+cpulteid="(\.*)"|\s+cpulteid=(\.*)\s|\s+cpulteid=(\.*)$ cpulteid fortinet-fortigate-firewall \s+craction="(\.*)"|\s+craction=(\.*)\s|\s+craction=(\.*)$ craction fortinet-fortigate-firewall \s+created="(\.*)"|\s+created=(\.*)\s|\s+created=(\.*)$ created fortinet-fortigate-firewall \s+criticalcount="(\.*)"|\s+criticalcount=(\.*)\s|\s+criticalcount=(\.*)$ criticalcount fortinet-fortigate-firewall \s+crl="(\.*)"|\s+crl=(\.*)\s|\s+crl=(\.*)$ crl fortinet-fortigate-firewall \s+crlevel="(\.*)"|\s+crlevel=(\.*)\s|\s+crlevel=(\.*)$ crlevel fortinet-fortigate-firewall \s+crscore="(\.*)"|\s+crscore=(\.*)\s|\s+crscore=(\.*)$ crscore fortinet-fortigate-firewall \s+csgsn="(\.*)"|\s+csgsn=(\.*)\s|\s+csgsn=(\.*)$ csgsn fortinet-fortigate-firewall \s+cveid="(\.*)"|\s+cveid=(\.*)\s|\s+cveid=(\.*)$ cveid fortinet-fortigate-firewall \s+daddr="(\.*)"|\s+daddr=(\.*)\s|\s+daddr=(\.*)$ daddr fortinet-fortigate-firewall \s+daemon="(\.*)"|\s+daemon=(\.*)\s|\s+daemon=(\.*)$ daemon fortinet-fortigate-firewall \s+datarange="(\.*)"|\s+datarange=(\.*)\s|\s+datarange=(\.*)$ datarange fortinet-fortigate-firewall date="(\.*)"|date=(\.*)\s|date=(\.*)$ date fortinet-fortigate-firewall \s+ddnsserver="(\.*)"|\s+ddnsserver=(\.*)\s|\s+ddnsserver=(\.*)$ ddnsserver fortinet-fortigate-firewall \s+deny_cause="(\.*)"|\s+deny_cause=(\.*)\s|\s+deny_cause=(\.*)$ deny_cause fortinet-fortigate-firewall \s+desc="(\.*)"|\s+desc=(\.*)\s|\s+desc=(\.*)$ desc fortinet-fortigate-firewall \s+detectionmethod="(\.*)"|\s+detectionmethod=(\.*)\s|\s+detectionmethod=(\.*)$ detectionmethod fortinet-fortigate-firewall \s+devid="(\.*)"|\s+devid=(\.*)\s|\s+devid=(\.*)$ devid fortinet-fortigate-firewall \s+devintfname="(\.*)"|\s+devintfname=(\.*)\s|\s+devintfname=(\.*)$ devintfname fortinet-fortigate-firewall \s+devtype="(\.*)"|\s+devtype=(\.*)\s|\s+devtype=(\.*)$ devtype fortinet-fortigate-firewall \s+dhcp_msg="(\.*)"|\s+dhcp_msg=(\.*)\s|\s+dhcp_msg=(\.*)$ dhcp_msg fortinet-fortigate-firewall \s+dintf="(\.*)"|\s+dintf=(\.*)\s|\s+dintf=(\.*)$ dintf fortinet-fortigate-firewall \s+dir="(\.*)"|\s+dir=(\.*)\s|\s+dir=(\.*)$ dir fortinet-fortigate-firewall \s+direction="(\.*)"|\s+direction=(\.*)\s|\s+direction=(\.*)$ direction fortinet-fortigate-firewall \s+disk="(\.*)"|\s+disk=(\.*)\s|\s+disk=(\.*)$ disk fortinet-fortigate-firewall \s+disklograte="(\.*)"|\s+disklograte=(\.*)\s|\s+disklograte=(\.*)$ disklograte fortinet-fortigate-firewall \s+dlp="(\.*)"|\s+dlp=(\.*)\s|\s+dlp=(\.*)$ dlp fortinet-fortigate-firewall \s+dlpextra="(\.*)"|\s+dlpextra=(\.*)\s|\s+dlpextra=(\.*)$ dlpextra fortinet-fortigate-firewall \s+dns="(\.*)"|\s+dns=(\.*)\s|\s+dns=(\.*)$ dns fortinet-fortigate-firewall \s+docsource="(\.*)"|\s+docsource=(\.*)\s|\s+docsource=(\.*)$ docsource fortinet-fortigate-firewall \s+domainctrlauthstate="(\.*)"|\s+domainctrlauthstate=(\.*)\s|\s+domainctrlauthstate=(\.*)$ domainctrlauthstate fortinet-fortigate-firewall \s+domainctrlauthtype="(\.*)"|\s+domainctrlauthtype=(\.*)\s|\s+domainctrlauthtype=(\.*)$ domainctrlauthtype fortinet-fortigate-firewall \s+domainctrldomain="(\.*)"|\s+domainctrldomain=(\.*)\s|\s+domainctrldomain=(\.*)$ domainctrldomain fortinet-fortigate-firewall \s+domainctrlip="(\.*)"|\s+domainctrlip=(\.*)\s|\s+domainctrlip=(\.*)$ domainctrlip fortinet-fortigate-firewall \s+domainctrlname="(\.*)"|\s+domainctrlname=(\.*)\s|\s+domainctrlname=(\.*)$ domainctrlname fortinet-fortigate-firewall \s+domainctrlprotocoltype="(\.*)"|\s+domainctrlprotocoltype=(\.*)\s|\s+domainctrlprotocoltype=(\.*)$ domainctrlprotocoltype fortinet-fortigate-firewall \s+domainctrlusername="(\.*)"|\s+domainctrlusername=(\.*)\s|\s+domainctrlusername=(\.*)$ domainctrlusername fortinet-fortigate-firewall \s+domainfilteridx="(\.*)"|\s+domainfilteridx=(\.*)\s|\s+domainfilteridx=(\.*)$ domainfilteridx fortinet-fortigate-firewall \s+domainfilterlist="(\.*)"|\s+domainfilterlist=(\.*)\s|\s+domainfilterlist=(\.*)$ domainfilterlist fortinet-fortigate-firewall \s+downbandwidthmeasured="(\.*)"|\s+downbandwidthmeasured=(\.*)\s|\s+downbandwidthmeasured=(\.*)$ downbandwidthmeasured fortinet-fortigate-firewall \s+ds="(\.*)"|\s+ds=(\.*)\s|\s+ds=(\.*)$ ds fortinet-fortigate-firewall \s+dst_host="(\.*)"|\s+dst_host=(\.*)\s|\s+dst_host=(\.*)$ dst_host fortinet-fortigate-firewall \s+dst_int="(\.*)"|\s+dst_int=(\.*)\s|\s+dst_int=(\.*)$ dst_int fortinet-fortigate-firewall \s+dst_port="(\.*)"|\s+dst_port=(\.*)\s|\s+dst_port=(\.*)$ dst_port fortinet-fortigate-firewall \s+dstauthserver="(\.*)"|\s+dstauthserver=(\.*)\s|\s+dstauthserver=(\.*)$ dstauthserver fortinet-fortigate-firewall \s+dstcity="(\.*)"|\s+dstcity=(\.*)\s|\s+dstcity=(\.*)$ dstcity fortinet-fortigate-firewall \s+dstcountry="(\.*)"|\s+dstcountry=(\.*)\s|\s+dstcountry=(\.*)$ dstcountry fortinet-fortigate-firewall \s+dstdevtype="(\.*)"|\s+dstdevtype=(\.*)\s|\s+dstdevtype=(\.*)$ dstdevtype fortinet-fortigate-firewall \s+dstfamily="(\.*)"|\s+dstfamily=(\.*)\s|\s+dstfamily=(\.*)$ dstfamily fortinet-fortigate-firewall \s+dsthwvendor="(\.*)"|\s+dsthwvendor=(\.*)\s|\s+dsthwvendor=(\.*)$ dsthwvendor fortinet-fortigate-firewall \s+dsthwversion="(\.*)"|\s+dsthwversion=(\.*)\s|\s+dsthwversion=(\.*)$ dsthwversion fortinet-fortigate-firewall \s+dstinetsvc="(\.*)"|\s+dstinetsvc=(\.*)\s|\s+dstinetsvc=(\.*)$ dstinetsvc fortinet-fortigate-firewall \s+dstintf="(\.*)"|\s+dstintf=(\.*)\s|\s+dstintf=(\.*)$ dstintf fortinet-fortigate-firewall \s+dstintfrole="(\.*)"|\s+dstintfrole=(\.*)\s|\s+dstintfrole=(\.*)$ dstintfrole fortinet-fortigate-firewall \s+dstip="(\.*)"|\s+dstip=(\.*)\s|\s+dstip=(\.*)$ dstip fortinet-fortigate-firewall \s+dstmac="(\.*)"|\s+dstmac=(\.*)\s|\s+dstmac=(\.*)$ dstmac fortinet-fortigate-firewall \s+dstname="(\.*)"|\s+dstname=(\.*)\s|\s+dstname=(\.*)$ dstname fortinet-fortigate-firewall \s+dstosname="(\.*)"|\s+dstosname=(\.*)\s|\s+dstosname=(\.*)$ dstosname fortinet-fortigate-firewall \s+dstport="(\.*)"|\s+dstport=(\.*)\s|\s+dstport=(\.*)$ dstport fortinet-fortigate-firewall \s+dstregion="(\.*)"|\s+dstregion=(\.*)\s|\s+dstregion=(\.*)$ dstregion fortinet-fortigate-firewall \s+dstreputation="(\.*)"|\s+dstreputation=(\.*)\s|\s+dstreputation=(\.*)$ dstreputation fortinet-fortigate-firewall \s+dstserver="(\.*)"|\s+dstserver=(\.*)\s|\s+dstserver=(\.*)$ dstserver fortinet-fortigate-firewall \s+dstssid="(\.*)"|\s+dstssid=(\.*)\s|\s+dstssid=(\.*)$ dstssid fortinet-fortigate-firewall \s+dstswversion="(\.*)"|\s+dstswversion=(\.*)\s|\s+dstswversion=(\.*)$ dstswversion fortinet-fortigate-firewall \s+dstthreatfeed="(\.*)"|\s+dstthreatfeed=(\.*)\s|\s+dstthreatfeed=(\.*)$ dstthreatfeed fortinet-fortigate-firewall \s+dstunauthuser="(\.*)"|\s+dstunauthuser=(\.*)\s|\s+dstunauthuser=(\.*)$ dstunauthuser fortinet-fortigate-firewall \s+dstunauthusersource="(\.*)"|\s+dstunauthusersource=(\.*)\s|\s+dstunauthusersource=(\.*)$ dstunauthusersource fortinet-fortigate-firewall \s+dstuser="(\.*)"|\s+dstuser=(\.*)\s|\s+dstuser=(\.*)$ dstuser fortinet-fortigate-firewall \s+dstuuid="(\.*)"|\s+dstuuid=(\.*)\s|\s+dstuuid=(\.*)$ dstuuid fortinet-fortigate-firewall \s+dtlexp="(\.*)"|\s+dtlexp=(\.*)\s|\s+dtlexp=(\.*)$ dtlexp fortinet-fortigate-firewall \s+dtype="(\.*)"|\s+dtype=(\.*)\s|\s+dtype=(\.*)$ dtype fortinet-fortigate-firewall \s+duid="(\.*)"|\s+duid=(\.*)\s|\s+duid=(\.*)$ duid fortinet-fortigate-firewall \s+duration="(\.*)"|\s+duration=(\.*)\s|\s+duration=(\.*)$ duration fortinet-fortigate-firewall \s+durationdelta="(\.*)"|\s+durationdelta=(\.*)\s|\s+durationdelta=(\.*)$ durationdelta fortinet-fortigate-firewall \s+eapolcnt="(\.*)"|\s+eapolcnt=(\.*)\s|\s+eapolcnt=(\.*)$ eapolcnt fortinet-fortigate-firewall \s+eapoltype="(\.*)"|\s+eapoltype=(\.*)\s|\s+eapoltype=(\.*)$ eapoltype fortinet-fortigate-firewall \s+emailfilter="(\.*)"|\s+emailfilter=(\.*)\s|\s+emailfilter=(\.*)$ emailfilter fortinet-fortigate-firewall \s+emsconnection="(\.*)"|\s+emsconnection=(\.*)\s|\s+emsconnection=(\.*)$ emsconnection fortinet-fortigate-firewall \s+encrypt="(\.*)"|\s+encrypt=(\.*)\s|\s+encrypt=(\.*)$ encrypt fortinet-fortigate-firewall \s+encryption="(\.*)"|\s+encryption=(\.*)\s|\s+encryption=(\.*)$ encryption fortinet-fortigate-firewall \s+end="(\.*)"|\s+end=(\.*)\s|\s+end=(\.*)$ end fortinet-fortigate-firewall \s+endusraddress="(\.*)"|\s+endusraddress=(\.*)\s|\s+endusraddress=(\.*)$ endusraddress fortinet-fortigate-firewall \s+epoch="(\.*)"|\s+epoch=(\.*)\s|\s+epoch=(\.*)$ epoch fortinet-fortigate-firewall \s+error="(\.*)"|\s+error=(\.*)\s|\s+error=(\.*)$ error fortinet-fortigate-firewall \s+error_num="(\.*)"|\s+error_num=(\.*)\s|\s+error_num=(\.*)$ error_num fortinet-fortigate-firewall \s+errorcount="(\.*)"|\s+errorcount=(\.*)\s|\s+errorcount=(\.*)$ errorcount fortinet-fortigate-firewall \s+espauth="(\.*)"|\s+espauth=(\.*)\s|\s+espauth=(\.*)$ espauth fortinet-fortigate-firewall \s+esptransform="(\.*)"|\s+esptransform=(\.*)\s|\s+esptransform=(\.*)$ esptransform fortinet-fortigate-firewall \s+event="(\.*)"|\s+event=(\.*)\s|\s+event=(\.*)$ event fortinet-fortigate-firewall \s+event_id="(\.*)"|\s+event_id=(\.*)\s|\s+event_id=(\.*)$ event_id fortinet-fortigate-firewall \s+eventid="(\.*)"|\s+eventid=(\.*)\s|\s+eventid=(\.*)$ eventid fortinet-fortigate-firewall \s+eventsubtype="(\.*)"|\s+eventsubtype=(\.*)\s|\s+eventsubtype=(\.*)$ eventsubtype fortinet-fortigate-firewall \s+eventtime="(\.*)"|\s+eventtime=(\.*)\s|\s+eventtime=(\.*)$ eventtime fortinet-fortigate-firewall \s+eventtype="(\.*)"|\s+eventtype=(\.*)\s|\s+eventtype=(\.*)$ eventtype fortinet-fortigate-firewall \s+exch="(\.*)"|\s+exch=(\.*)\s|\s+exch=(\.*)$ exch fortinet-fortigate-firewall \s+exchange="(\.*)"|\s+exchange=(\.*)\s|\s+exchange=(\.*)$ exchange fortinet-fortigate-firewall \s+expectedsignature="(\.*)"|\s+expectedsignature=(\.*)\s|\s+expectedsignature=(\.*)$ expectedsignature fortinet-fortigate-firewall \s+expiry="(\.*)"|\s+expiry=(\.*)\s|\s+expiry=(\.*)$ expiry fortinet-fortigate-firewall \s+extension="(\.*)"|\s+extension=(\.*)\s|\s+extension=(\.*)$ extension fortinet-fortigate-firewall \s+faiaction="(\.*)"|\s+faiaction=(\.*)\s|\s+faiaction=(\.*)$ faiaction fortinet-fortigate-firewall \s+faiconfidence="(\.*)"|\s+faiconfidence=(\.*)\s|\s+faiconfidence=(\.*)$ faiconfidence fortinet-fortigate-firewall \s+faifileid="(\.*)"|\s+faifileid=(\.*)\s|\s+faifileid=(\.*)$ faifileid fortinet-fortigate-firewall \s+faifiletype="(\.*)"|\s+faifiletype=(\.*)\s|\s+faifiletype=(\.*)$ faifiletype fortinet-fortigate-firewall \s+failuredev="(\.*)"|\s+failuredev=(\.*)\s|\s+failuredev=(\.*)$ failuredev fortinet-fortigate-firewall \s+faiseverity="(\.*)"|\s+faiseverity=(\.*)\s|\s+faiseverity=(\.*)$ faiseverity fortinet-fortigate-firewall \s+fams_pause="(\.*)"|\s+fams_pause=(\.*)\s|\s+fams_pause=(\.*)$ fams_pause fortinet-fortigate-firewall \s+fazlograte="(\.*)"|\s+fazlograte=(\.*)\s|\s+fazlograte=(\.*)$ fazlograte fortinet-fortigate-firewall \s+fctemsname="(\.*)"|\s+fctemsname=(\.*)\s|\s+fctemsname=(\.*)$ fctemsname fortinet-fortigate-firewall \s+fctemssn="(\.*)"|\s+fctemssn=(\.*)\s|\s+fctemssn=(\.*)$ fctemssn fortinet-fortigate-firewall \s+fctuid="(\.*)"|\s+fctuid=(\.*)\s|\s+fctuid=(\.*)$ fctuid fortinet-fortigate-firewall \s+field="(\.*)"|\s+field=(\.*)\s|\s+field=(\.*)$ field fortinet-fortigate-firewall \s+file="(\.*)"|\s+file=(\.*)\s|\s+file=(\.*)$ file fortinet-fortigate-firewall \s+filefilter="(\.*)"|\s+filefilter=(\.*)\s|\s+filefilter=(\.*)$ filefilter fortinet-fortigate-firewall \s+filehash="(\.*)"|\s+filehash=(\.*)\s|\s+filehash=(\.*)$ filehash fortinet-fortigate-firewall \s+filehashsrc="(\.*)"|\s+filehashsrc=(\.*)\s|\s+filehashsrc=(\.*)$ filehashsrc fortinet-fortigate-firewall \s+filename="(\.*)"|\s+filename=(\.*)\s|\s+filename=(\.*)$ filename fortinet-fortigate-firewall \s+filesize="(\.*)"|\s+filesize=(\.*)\s|\s+filesize=(\.*)$ filesize fortinet-fortigate-firewall \s+filetype="(\.*)"|\s+filetype=(\.*)\s|\s+filetype=(\.*)$ filetype fortinet-fortigate-firewall \s+filtercat="(\.*)"|\s+filtercat=(\.*)\s|\s+filtercat=(\.*)$ filtercat fortinet-fortigate-firewall \s+filteridx="(\.*)"|\s+filteridx=(\.*)\s|\s+filteridx=(\.*)$ filteridx fortinet-fortigate-firewall \s+filtername="(\.*)"|\s+filtername=(\.*)\s|\s+filtername=(\.*)$ filtername fortinet-fortigate-firewall \s+filtertype="(\.*)"|\s+filtertype=(\.*)\s|\s+filtertype=(\.*)$ filtertype fortinet-fortigate-firewall \s+fndraction="(\.*)"|\s+fndraction=(\.*)\s|\s+fndraction=(\.*)$ fndraction fortinet-fortigate-firewall \s+fndrconfidence="(\.*)"|\s+fndrconfidence=(\.*)\s|\s+fndrconfidence=(\.*)$ fndrconfidence fortinet-fortigate-firewall \s+fndrfileid="(\.*)"|\s+fndrfileid=(\.*)\s|\s+fndrfileid=(\.*)$ fndrfileid fortinet-fortigate-firewall \s+fndrfiletype="(\.*)"|\s+fndrfiletype=(\.*)\s|\s+fndrfiletype=(\.*)$ fndrfiletype fortinet-fortigate-firewall \s+fndrseverity="(\.*)"|\s+fndrseverity=(\.*)\s|\s+fndrseverity=(\.*)$ fndrseverity fortinet-fortigate-firewall \s+fndrverdict="(\.*)"|\s+fndrverdict=(\.*)\s|\s+fndrverdict=(\.*)$ fndrverdict fortinet-fortigate-firewall \s+forti="(\.*)"|\s+forti=(\.*)\s|\s+forti=(\.*)$ forti fortinet-fortigate-firewall \s+fortiguardresp="(\.*)"|\s+fortiguardresp=(\.*)\s|\s+fortiguardresp=(\.*)$ fortiguardresp fortinet-fortigate-firewall \s+forwardedfor="(\.*)"|\s+forwardedfor=(\.*)\s|\s+forwardedfor=(\.*)$ forwardedfor fortinet-fortigate-firewall \s+fqdn="(\.*)"|\s+fqdn=(\.*)\s|\s+fqdn=(\.*)$ fqdn fortinet-fortigate-firewall \s+frametype="(\.*)"|\s+frametype=(\.*)\s|\s+frametype=(\.*)$ frametype fortinet-fortigate-firewall \s+freediskstorage="(\.*)"|\s+freediskstorage=(\.*)\s|\s+freediskstorage=(\.*)$ freediskstorage fortinet-fortigate-firewall \s+from="(\.*)"|\s+from=(\.*)\s|\s+from=(\.*)$ from fortinet-fortigate-firewall \s+from_vcluster="(\.*)"|\s+from_vcluster=(\.*)\s|\s+from_vcluster=(\.*)$ from_vcluster fortinet-fortigate-firewall \s+fsaaction="(\.*)"|\s+fsaaction=(\.*)\s|\s+fsaaction=(\.*)$ fsaaction fortinet-fortigate-firewall \s+fsafileid="(\.*)"|\s+fsafileid=(\.*)\s|\s+fsafileid=(\.*)$ fsafileid fortinet-fortigate-firewall \s+fsafiletype="(\.*)"|\s+fsafiletype=(\.*)\s|\s+fsafiletype=(\.*)$ fsafiletype fortinet-fortigate-firewall \s+fsaseverity="(\.*)"|\s+fsaseverity=(\.*)\s|\s+fsaseverity=(\.*)$ fsaseverity fortinet-fortigate-firewall \s+fsaverdict="(\.*)"|\s+fsaverdict=(\.*)\s|\s+fsaverdict=(\.*)$ fsaverdict fortinet-fortigate-firewall \s+ftlkintf="(\.*)"|\s+ftlkintf=(\.*)\s|\s+ftlkintf=(\.*)$ ftlkintf fortinet-fortigate-firewall \s+fwdsrv="(\.*)"|\s+fwdsrv=(\.*)\s|\s+fwdsrv=(\.*)$ fwdsrv fortinet-fortigate-firewall \s+fwserver_name="(\.*)"|\s+fwserver_name=(\.*)\s|\s+fwserver_name=(\.*)$ fwserver_name fortinet-fortigate-firewall \s+gateway="(\.*)"|\s+gateway=(\.*)\s|\s+gateway=(\.*)$ gateway fortinet-fortigate-firewall \s+gatewayid="(\.*)"|\s+gatewayid=(\.*)\s|\s+gatewayid=(\.*)$ gatewayid fortinet-fortigate-firewall \s+green="(\.*)"|\s+green=(\.*)\s|\s+green=(\.*)$ green fortinet-fortigate-firewall \s+group="(\.*)"|\s+group=(\.*)\s|\s+group=(\.*)$ group fortinet-fortigate-firewall \s+groupid="(\.*)"|\s+groupid=(\.*)\s|\s+groupid=(\.*)$ groupid fortinet-fortigate-firewall \s+gtp="(\.*)"|\s+gtp=(\.*)\s|\s+gtp=(\.*)$ gtp fortinet-fortigate-firewall \s+ha="(\.*)"|\s+ha=(\.*)\s|\s+ha=(\.*)$ ha fortinet-fortigate-firewall \s+ha_group="(\.*)"|\s+ha_group=(\.*)\s|\s+ha_group=(\.*)$ ha_group fortinet-fortigate-firewall \s+ha_role="(\.*)"|\s+ha_role=(\.*)\s|\s+ha_role=(\.*)$ ha_role fortinet-fortigate-firewall \s+handshake="(\.*)"|\s+handshake=(\.*)\s|\s+handshake=(\.*)$ handshake fortinet-fortigate-firewall \s+headerteid="(\.*)"|\s+headerteid=(\.*)\s|\s+headerteid=(\.*)$ headerteid fortinet-fortigate-firewall \s+healthcheck="(\.*)"|\s+healthcheck=(\.*)\s|\s+healthcheck=(\.*)$ healthcheck fortinet-fortigate-firewall \s+highcount="(\.*)"|\s+highcount=(\.*)\s|\s+highcount=(\.*)$ highcount fortinet-fortigate-firewall \s+host="(\.*)"|\s+host=(\.*)\s|\s+host=(\.*)$ host fortinet-fortigate-firewall \s+hostkeystatus="(\.*)"|\s+hostkeystatus=(\.*)\s|\s+hostkeystatus=(\.*)$ hostkeystatus fortinet-fortigate-firewall \s+hostname="(\.*)"|\s+hostname=(\.*)\s|\s+hostname=(\.*)$ hostname fortinet-fortigate-firewall \s+hseid="(\.*)"|\s+hseid=(\.*)\s|\s+hseid=(\.*)$ hseid fortinet-fortigate-firewall \s+httpcode="(\.*)"|\s+httpcode=(\.*)\s|\s+httpcode=(\.*)$ httpcode fortinet-fortigate-firewall \s+httpmethod="(\.*)"|\s+httpmethod=(\.*)\s|\s+httpmethod=(\.*)$ httpmethod fortinet-fortigate-firewall \s+iaid="(\.*)"|\s+iaid=(\.*)\s|\s+iaid=(\.*)$ iaid fortinet-fortigate-firewall \s+icap="(\.*)"|\s+icap=(\.*)\s|\s+icap=(\.*)$ icap fortinet-fortigate-firewall \s+icbaction="(\.*)"|\s+icbaction=(\.*)\s|\s+icbaction=(\.*)$ icbaction fortinet-fortigate-firewall \s+icbconfidence="(\.*)"|\s+icbconfidence=(\.*)\s|\s+icbconfidence=(\.*)$ icbconfidence fortinet-fortigate-firewall \s+icbfileid="(\.*)"|\s+icbfileid=(\.*)\s|\s+icbfileid=(\.*)$ icbfileid fortinet-fortigate-firewall \s+icbfiletype="(\.*)"|\s+icbfiletype=(\.*)\s|\s+icbfiletype=(\.*)$ icbfiletype fortinet-fortigate-firewall \s+icbseverity="(\.*)"|\s+icbseverity=(\.*)\s|\s+icbseverity=(\.*)$ icbseverity fortinet-fortigate-firewall \s+icbverdict="(\.*)"|\s+icbverdict=(\.*)\s|\s+icbverdict=(\.*)$ icbverdict fortinet-fortigate-firewall \s+icmpcode="(\.*)"|\s+icmpcode=(\.*)\s|\s+icmpcode=(\.*)$ icmpcode fortinet-fortigate-firewall \s+icmpid="(\.*)"|\s+icmpid=(\.*)\s|\s+icmpid=(\.*)$ icmpid fortinet-fortigate-firewall \s+icmptype="(\.*)"|\s+icmptype=(\.*)\s|\s+icmptype=(\.*)$ icmptype fortinet-fortigate-firewall \s+identifier="(\.*)"|\s+identifier=(\.*)\s|\s+identifier=(\.*)$ identifier fortinet-fortigate-firewall \s+ietype="(\.*)"|\s+ietype=(\.*)\s|\s+ietype=(\.*)$ ietype fortinet-fortigate-firewall \s+imei="(\.*)"|\s+imei=(\.*)\s|\s+imei=(\.*)$ imei fortinet-fortigate-firewall \s+imsi="(\.*)"|\s+imsi=(\.*)\s|\s+imsi=(\.*)$ imsi fortinet-fortigate-firewall \s+in_spi="(\.*)"|\s+in_spi=(\.*)\s|\s+in_spi=(\.*)$ in_spi fortinet-fortigate-firewall \s+inbandwidth="(\.*)"|\s+inbandwidth=(\.*)\s|\s+inbandwidth=(\.*)$ inbandwidth fortinet-fortigate-firewall \s+inbandwidthavailable="(\.*)"|\s+inbandwidthavailable=(\.*)\s|\s+inbandwidthavailable=(\.*)$ inbandwidthavailable fortinet-fortigate-firewall \s+inbandwidthused="(\.*)"|\s+inbandwidthused=(\.*)\s|\s+inbandwidthused=(\.*)$ inbandwidthused fortinet-fortigate-firewall \s+incidentserialno="(\.*)"|\s+incidentserialno=(\.*)\s|\s+incidentserialno=(\.*)$ incidentserialno fortinet-fortigate-firewall \s+infectedfilelevel="(\.*)"|\s+infectedfilelevel=(\.*)\s|\s+infectedfilelevel=(\.*)$ infectedfilelevel fortinet-fortigate-firewall \s+infectedfilename="(\.*)"|\s+infectedfilename=(\.*)\s|\s+infectedfilename=(\.*)$ infectedfilename fortinet-fortigate-firewall \s+infectedfilesize="(\.*)"|\s+infectedfilesize=(\.*)\s|\s+infectedfilesize=(\.*)$ infectedfilesize fortinet-fortigate-firewall \s+infectedfiletype="(\.*)"|\s+infectedfiletype=(\.*)\s|\s+infectedfiletype=(\.*)$ infectedfiletype fortinet-fortigate-firewall \s+infection="(\.*)"|\s+infection=(\.*)\s|\s+infection=(\.*)$ infection fortinet-fortigate-firewall \s+informationsource="(\.*)"|\s+informationsource=(\.*)\s|\s+informationsource=(\.*)$ informationsource fortinet-fortigate-firewall \s+init="(\.*)"|\s+init=(\.*)\s|\s+init=(\.*)$ init fortinet-fortigate-firewall \s+initiator="(\.*)"|\s+initiator=(\.*)\s|\s+initiator=(\.*)$ initiator fortinet-fortigate-firewall \s+interface="(\.*)"|\s+interface=(\.*)\s|\s+interface=(\.*)$ interface fortinet-fortigate-firewall \s+intf="(\.*)"|\s+intf=(\.*)\s|\s+intf=(\.*)$ intf fortinet-fortigate-firewall \s+invalidmac="(\.*)"|\s+invalidmac=(\.*)\s|\s+invalidmac=(\.*)$ invalidmac fortinet-fortigate-firewall \s+ip="(\.*)"|\s+ip=(\.*)\s|\s+ip=(\.*)$ ip fortinet-fortigate-firewall \s+ipaddr="(\.*)"|\s+ipaddr=(\.*)\s|\s+ipaddr=(\.*)$ ipaddr fortinet-fortigate-firewall \s+ips="(\.*)"|\s+ips=(\.*)\s|\s+ips=(\.*)$ ips fortinet-fortigate-firewall \s+iptype="(\.*)"|\s+iptype=(\.*)\s|\s+iptype=(\.*)$ iptype fortinet-fortigate-firewall \s+issuer="(\.*)"|\s+issuer=(\.*)\s|\s+issuer=(\.*)$ issuer fortinet-fortigate-firewall \s+jitter="(\.*)"|\s+jitter=(\.*)\s|\s+jitter=(\.*)$ jitter fortinet-fortigate-firewall \s+keyalgo="(\.*)"|\s+keyalgo=(\.*)\s|\s+keyalgo=(\.*)$ keyalgo fortinet-fortigate-firewall \s+keysize="(\.*)"|\s+keysize=(\.*)\s|\s+keysize=(\.*)$ keysize fortinet-fortigate-firewall \s+keyword="(\.*)"|\s+keyword=(\.*)\s|\s+keyword=(\.*)$ keyword fortinet-fortigate-firewall \s+kind="(\.*)"|\s+kind=(\.*)\s|\s+kind=(\.*)$ kind fortinet-fortigate-firewall \s+kxcurve="(\.*)"|\s+kxcurve=(\.*)\s|\s+kxcurve=(\.*)$ kxcurve fortinet-fortigate-firewall \s+kxproto="(\.*)"|\s+kxproto=(\.*)\s|\s+kxproto=(\.*)$ kxproto fortinet-fortigate-firewall \s+lanin="(\.*)"|\s+lanin=(\.*)\s|\s+lanin=(\.*)$ lanin fortinet-fortigate-firewall \s+lanout="(\.*)"|\s+lanout=(\.*)\s|\s+lanout=(\.*)$ lanout fortinet-fortigate-firewall \s+latency="(\.*)"|\s+latency=(\.*)\s|\s+latency=(\.*)$ latency fortinet-fortigate-firewall \s+lease="(\.*)"|\s+lease=(\.*)\s|\s+lease=(\.*)$ lease fortinet-fortigate-firewall \s+level="(\.*)"|\s+level=(\.*)\s|\s+level=(\.*)$ level fortinet-fortigate-firewall \s+license_limit="(\.*)"|\s+license_limit=(\.*)\s|\s+license_limit=(\.*)$ license_limit fortinet-fortigate-firewall \s+limit="(\.*)"|\s+limit=(\.*)\s|\s+limit=(\.*)$ limit fortinet-fortigate-firewall \s+line="(\.*)"|\s+line=(\.*)\s|\s+line=(\.*)$ line fortinet-fortigate-firewall \s+linked="(\.*)"|\s+linked=(\.*)\s|\s+linked=(\.*)$ linked fortinet-fortigate-firewall \s+live="(\.*)"|\s+live=(\.*)\s|\s+live=(\.*)$ live fortinet-fortigate-firewall \s+local="(\.*)"|\s+local=(\.*)\s|\s+local=(\.*)$ local fortinet-fortigate-firewall \s+localdevcount="(\.*)"|\s+localdevcount=(\.*)\s|\s+localdevcount=(\.*)$ localdevcount fortinet-fortigate-firewall \s+locip="(\.*)"|\s+locip=(\.*)\s|\s+locip=(\.*)$ locip fortinet-fortigate-firewall \s+locport="(\.*)"|\s+locport=(\.*)\s|\s+locport=(\.*)$ locport fortinet-fortigate-firewall \s+log="(\.*)"|\s+log=(\.*)\s|\s+log=(\.*)$ log fortinet-fortigate-firewall \s+logdesc="(\.*)"|\s+logdesc=(\.*)\s|\s+logdesc=(\.*)$ logdesc fortinet-fortigate-firewall \s+logid="(\.*)"|\s+logid=(\.*)\s|\s+logid=(\.*)$ logid fortinet-fortigate-firewall \s+login="(\.*)"|\s+login=(\.*)\s|\s+login=(\.*)$ login fortinet-fortigate-firewall \s+logsrc="(\.*)"|\s+logsrc=(\.*)\s|\s+logsrc=(\.*)$ logsrc fortinet-fortigate-firewall \s+lowcount="(\.*)"|\s+lowcount=(\.*)\s|\s+lowcount=(\.*)$ lowcount fortinet-fortigate-firewall \s+mac="(\.*)"|\s+mac=(\.*)\s|\s+mac=(\.*)$ mac fortinet-fortigate-firewall \s+malform_data="(\.*)"|\s+malform_data=(\.*)\s|\s+malform_data=(\.*)$ malform_data fortinet-fortigate-firewall \s+malform_desc="(\.*)"|\s+malform_desc=(\.*)\s|\s+malform_desc=(\.*)$ malform_desc fortinet-fortigate-firewall \s+manuf="(\.*)"|\s+manuf=(\.*)\s|\s+manuf=(\.*)$ manuf fortinet-fortigate-firewall \s+masterdstmac="(\.*)"|\s+masterdstmac=(\.*)\s|\s+masterdstmac=(\.*)$ masterdstmac fortinet-fortigate-firewall \s+mastersrcmac="(\.*)"|\s+mastersrcmac=(\.*)\s|\s+mastersrcmac=(\.*)$ mastersrcmac fortinet-fortigate-firewall \s+matchfilename="(\.*)"|\s+matchfilename=(\.*)\s|\s+matchfilename=(\.*)$ matchfilename fortinet-fortigate-firewall \s+matchfiletype="(\.*)"|\s+matchfiletype=(\.*)\s|\s+matchfiletype=(\.*)$ matchfiletype fortinet-fortigate-firewall \s+max="(\.*)"|\s+max=(\.*)\s|\s+max=(\.*)$ max fortinet-fortigate-firewall \s+mediumcount="(\.*)"|\s+mediumcount=(\.*)\s|\s+mediumcount=(\.*)$ mediumcount fortinet-fortigate-firewall \s+mem="(\.*)"|\s+mem=(\.*)\s|\s+mem=(\.*)$ mem fortinet-fortigate-firewall \s+member="(\.*)"|\s+member=(\.*)\s|\s+member=(\.*)$ member fortinet-fortigate-firewall \s+meshmode="(\.*)"|\s+meshmode=(\.*)\s|\s+meshmode=(\.*)$ meshmode fortinet-fortigate-firewall \s+message_type="(\.*)"|\s+message_type=(\.*)\s|\s+message_type=(\.*)$ message_type fortinet-fortigate-firewall \s+method="(\.*)"|\s+method=(\.*)\s|\s+method=(\.*)$ method fortinet-fortigate-firewall \s+mgmtcnt="(\.*)"|\s+mgmtcnt=(\.*)\s|\s+mgmtcnt=(\.*)$ mgmtcnt fortinet-fortigate-firewall \s+mitm="(\.*)"|\s+mitm=(\.*)\s|\s+mitm=(\.*)$ mitm fortinet-fortigate-firewall \s+mode="(\.*)"|\s+mode=(\.*)\s|\s+mode=(\.*)$ mode fortinet-fortigate-firewall \s+model="(\.*)"|\s+model=(\.*)\s|\s+model=(\.*)$ model fortinet-fortigate-firewall \s+module="(\.*)"|\s+module=(\.*)\s|\s+module=(\.*)$ module fortinet-fortigate-firewall \s+monitor="(\.*)"|\s+monitor=(\.*)\s|\s+monitor=(\.*)$ monitor fortinet-fortigate-firewall \s+moscodec="(\.*)"|\s+moscodec=(\.*)\s|\s+moscodec=(\.*)$ moscodec fortinet-fortigate-firewall \s+mosvalue="(\.*)"|\s+mosvalue=(\.*)\s|\s+mosvalue=(\.*)$ mosvalue fortinet-fortigate-firewall \s+mpsk="(\.*)"|\s+mpsk=(\.*)\s|\s+mpsk=(\.*)$ mpsk fortinet-fortigate-firewall \s+msg="(\.*)"|\s+msg=(\.*)\s|\s+msg=(\.*)$ msg fortinet-fortigate-firewall \s+msgtypename="(\.*)"|\s+msgtypename=(\.*)\s|\s+msgtypename=(\.*)$ msgtypename fortinet-fortigate-firewall \s+msisdn="(\.*)"|\s+msisdn=(\.*)\s|\s+msisdn=(\.*)$ msisdn fortinet-fortigate-firewall \s+mtu="(\.*)"|\s+mtu=(\.*)\s|\s+mtu=(\.*)$ mtu fortinet-fortigate-firewall \s+nai="(\.*)"|\s+nai=(\.*)\s|\s+nai=(\.*)$ nai fortinet-fortigate-firewall \s+name="(\.*)"|\s+name=(\.*)\s|\s+name=(\.*)$ name fortinet-fortigate-firewall \s+nat="(\.*)"|\s+nat=(\.*)\s|\s+nat=(\.*)$ nat fortinet-fortigate-firewall \s+neighbor="(\.*)"|\s+neighbor=(\.*)\s|\s+neighbor=(\.*)$ neighbor fortinet-fortigate-firewall \s+netid="(\.*)"|\s+netid=(\.*)\s|\s+netid=(\.*)$ netid fortinet-fortigate-firewall \s+networktransfertime="(\.*)"|\s+networktransfertime=(\.*)\s|\s+networktransfertime=(\.*)$ networktransfertime fortinet-fortigate-firewall \s+new_status="(\.*)"|\s+new_status=(\.*)\s|\s+new_status=(\.*)$ new_status fortinet-fortigate-firewall \s+new_value="(\.*)"|\s+new_value=(\.*)\s|\s+new_value=(\.*)$ new_value fortinet-fortigate-firewall \s+newchannel="(\.*)"|\s+newchannel=(\.*)\s|\s+newchannel=(\.*)$ newchannel fortinet-fortigate-firewall \s+newchassisid="(\.*)"|\s+newchassisid=(\.*)\s|\s+newchassisid=(\.*)$ newchassisid fortinet-fortigate-firewall \s+newslot="(\.*)"|\s+newslot=(\.*)\s|\s+newslot=(\.*)$ newslot fortinet-fortigate-firewall \s+newvalue="(\.*)"|\s+newvalue=(\.*)\s|\s+newvalue=(\.*)$ newvalue fortinet-fortigate-firewall \s+nextstat="(\.*)"|\s+nextstat=(\.*)\s|\s+nextstat=(\.*)$ nextstat fortinet-fortigate-firewall \s+noise="(\.*)"|\s+noise=(\.*)\s|\s+noise=(\.*)$ noise fortinet-fortigate-firewall \s+notafter="(\.*)"|\s+notafter=(\.*)\s|\s+notafter=(\.*)$ notafter fortinet-fortigate-firewall \s+notbefore="(\.*)"|\s+notbefore=(\.*)\s|\s+notbefore=(\.*)$ notbefore fortinet-fortigate-firewall \s+nsapi="(\.*)"|\s+nsapi=(\.*)\s|\s+nsapi=(\.*)$ nsapi fortinet-fortigate-firewall \s+numpassmember="(\.*)"|\s+numpassmember=(\.*)\s|\s+numpassmember=(\.*)$ numpassmember fortinet-fortigate-firewall \s+old_status="(\.*)"|\s+old_status=(\.*)\s|\s+old_status=(\.*)$ old_status fortinet-fortigate-firewall \s+old_value="(\.*)"|\s+old_value=(\.*)\s|\s+old_value=(\.*)$ old_value fortinet-fortigate-firewall \s+oldchannel="(\.*)"|\s+oldchannel=(\.*)\s|\s+oldchannel=(\.*)$ oldchannel fortinet-fortigate-firewall \s+oldchassisid="(\.*)"|\s+oldchassisid=(\.*)\s|\s+oldchassisid=(\.*)$ oldchassisid fortinet-fortigate-firewall \s+oldslot="(\.*)"|\s+oldslot=(\.*)\s|\s+oldslot=(\.*)$ oldslot fortinet-fortigate-firewall \s+oldsn="(\.*)"|\s+oldsn=(\.*)\s|\s+oldsn=(\.*)$ oldsn fortinet-fortigate-firewall \s+oldvalue="(\.*)"|\s+oldvalue=(\.*)\s|\s+oldvalue=(\.*)$ oldvalue fortinet-fortigate-firewall \s+oldwprof="(\.*)"|\s+oldwprof=(\.*)\s|\s+oldwprof=(\.*)$ oldwprof fortinet-fortigate-firewall \s+onwire="(\.*)"|\s+onwire=(\.*)\s|\s+onwire=(\.*)$ onwire fortinet-fortigate-firewall \s+opercountry="(\.*)"|\s+opercountry=(\.*)\s|\s+opercountry=(\.*)$ opercountry fortinet-fortigate-firewall \s+operdrmamode="(\.*)"|\s+operdrmamode=(\.*)\s|\s+operdrmamode=(\.*)$ operdrmamode fortinet-fortigate-firewall \s+opertxpower="(\.*)"|\s+opertxpower=(\.*)\s|\s+opertxpower=(\.*)$ opertxpower fortinet-fortigate-firewall \s+osname="(\.*)"|\s+osname=(\.*)\s|\s+osname=(\.*)$ osname fortinet-fortigate-firewall \s+out_spi="(\.*)"|\s+out_spi=(\.*)\s|\s+out_spi=(\.*)$ out_spi fortinet-fortigate-firewall \s+outbandwidth="(\.*)"|\s+outbandwidth=(\.*)\s|\s+outbandwidth=(\.*)$ outbandwidth fortinet-fortigate-firewall \s+outbandwidthavailable="(\.*)"|\s+outbandwidthavailable=(\.*)\s|\s+outbandwidthavailable=(\.*)$ outbandwidthavailable fortinet-fortigate-firewall \s+outbandwidthused="(\.*)"|\s+outbandwidthused=(\.*)\s|\s+outbandwidthused=(\.*)$ outbandwidthused fortinet-fortigate-firewall \s+outintf="(\.*)"|\s+outintf=(\.*)\s|\s+outintf=(\.*)$ outintf fortinet-fortigate-firewall \s+packetloss="(\.*)"|\s+packetloss=(\.*)\s|\s+packetloss=(\.*)$ packetloss fortinet-fortigate-firewall \s+parameters="(\.*)"|\s+parameters=(\.*)\s|\s+parameters=(\.*)$ parameters fortinet-fortigate-firewall \s+passedcount="(\.*)"|\s+passedcount=(\.*)\s|\s+passedcount=(\.*)$ passedcount fortinet-fortigate-firewall \s+passwd="(\.*)"|\s+passwd=(\.*)\s|\s+passwd=(\.*)$ passwd fortinet-fortigate-firewall \s+path="(\.*)"|\s+path=(\.*)\s|\s+path=(\.*)$ path fortinet-fortigate-firewall \s+pathname="(\.*)"|\s+pathname=(\.*)\s|\s+pathname=(\.*)$ pathname fortinet-fortigate-firewall \s+pdstport="(\.*)"|\s+pdstport=(\.*)\s|\s+pdstport=(\.*)$ pdstport fortinet-fortigate-firewall \s+peer="(\.*)"|\s+peer=(\.*)\s|\s+peer=(\.*)$ peer fortinet-fortigate-firewall \s+peer_notif="(\.*)"|\s+peer_notif=(\.*)\s|\s+peer_notif=(\.*)$ peer_notif fortinet-fortigate-firewall \s+phase="(\.*)"|\s+phase=(\.*)\s|\s+phase=(\.*)$ phase fortinet-fortigate-firewall \s+phone="(\.*)"|\s+phone=(\.*)\s|\s+phone=(\.*)$ phone fortinet-fortigate-firewall \s+pid="(\.*)"|\s+pid=(\.*)\s|\s+pid=(\.*)$ pid fortinet-fortigate-firewall \s+policy_id="(\.*)"|\s+policy_id=(\.*)\s|\s+policy_id=(\.*)$ policy_id fortinet-fortigate-firewall \s+policyid="(\.*)"|\s+policyid=(\.*)\s|\s+policyid=(\.*)$ policyid fortinet-fortigate-firewall \s+policymode="(\.*)"|\s+policymode=(\.*)\s|\s+policymode=(\.*)$ policymode fortinet-fortigate-firewall \s+policyname="(\.*)"|\s+policyname=(\.*)\s|\s+policyname=(\.*)$ policyname fortinet-fortigate-firewall \s+policytype="(\.*)"|\s+policytype=(\.*)\s|\s+policytype=(\.*)$ policytype fortinet-fortigate-firewall \s+poluuid="(\.*)"|\s+poluuid=(\.*)\s|\s+poluuid=(\.*)$ poluuid fortinet-fortigate-firewall \s+poolname="(\.*)"|\s+poolname=(\.*)\s|\s+poolname=(\.*)$ poolname fortinet-fortigate-firewall \s+port="(\.*)"|\s+port=(\.*)\s|\s+port=(\.*)$ port fortinet-fortigate-firewall \s+portbegin="(\.*)"|\s+portbegin=(\.*)\s|\s+portbegin=(\.*)$ portbegin fortinet-fortigate-firewall \s+portend="(\.*)"|\s+portend=(\.*)\s|\s+portend=(\.*)$ portend fortinet-fortigate-firewall \s+probeproto="(\.*)"|\s+probeproto=(\.*)\s|\s+probeproto=(\.*)$ probeproto fortinet-fortigate-firewall \s+process="(\.*)"|\s+process=(\.*)\s|\s+process=(\.*)$ process fortinet-fortigate-firewall \s+processtime="(\.*)"|\s+processtime=(\.*)\s|\s+processtime=(\.*)$ processtime fortinet-fortigate-firewall \s+product="(\.*)"|\s+product=(\.*)\s|\s+product=(\.*)$ product fortinet-fortigate-firewall \s+profile="(\.*)"|\s+profile=(\.*)\s|\s+profile=(\.*)$ profile fortinet-fortigate-firewall \s+profiletype="(\.*)"|\s+profiletype=(\.*)\s|\s+profiletype=(\.*)$ profiletype fortinet-fortigate-firewall \s+proto="(\.*)"|\s+proto=(\.*)\s|\s+proto=(\.*)$ proto fortinet-fortigate-firewall \s+protocol="(\.*)"|\s+protocol=(\.*)\s|\s+protocol=(\.*)$ protocol fortinet-fortigate-firewall \s+proxyapptype="(\.*)"|\s+proxyapptype=(\.*)\s|\s+proxyapptype=(\.*)$ proxyapptype fortinet-fortigate-firewall \s+psrcport="(\.*)"|\s+psrcport=(\.*)\s|\s+psrcport=(\.*)$ psrcport fortinet-fortigate-firewall \s+qclass="(\.*)"|\s+qclass=(\.*)\s|\s+qclass=(\.*)$ qclass fortinet-fortigate-firewall \s+qname="(\.*)"|\s+qname=(\.*)\s|\s+qname=(\.*)$ qname fortinet-fortigate-firewall \s+qtype="(\.*)"|\s+qtype=(\.*)\s|\s+qtype=(\.*)$ qtype fortinet-fortigate-firewall \s+qtypeval="(\.*)"|\s+qtypeval=(\.*)\s|\s+qtypeval=(\.*)$ qtypeval fortinet-fortigate-firewall \s+quarskip="(\.*)"|\s+quarskip=(\.*)\s|\s+quarskip=(\.*)$ quarskip fortinet-fortigate-firewall \s+quotaexceeded="(\.*)"|\s+quotaexceeded=(\.*)\s|\s+quotaexceeded=(\.*)$ quotaexceeded fortinet-fortigate-firewall \s+quotamax="(\.*)"|\s+quotamax=(\.*)\s|\s+quotamax=(\.*)$ quotamax fortinet-fortigate-firewall \s+quotatype="(\.*)"|\s+quotatype=(\.*)\s|\s+quotatype=(\.*)$ quotatype fortinet-fortigate-firewall \s+quotaused="(\.*)"|\s+quotaused=(\.*)\s|\s+quotaused=(\.*)$ quotaused fortinet-fortigate-firewall \s+radioband="(\.*)"|\s+radioband=(\.*)\s|\s+radioband=(\.*)$ radioband fortinet-fortigate-firewall \s+radioid="(\.*)"|\s+radioid=(\.*)\s|\s+radioid=(\.*)$ radioid fortinet-fortigate-firewall \s+radioidclosest="(\.*)"|\s+radioidclosest=(\.*)\s|\s+radioidclosest=(\.*)$ radioidclosest fortinet-fortigate-firewall \s+radioiddetected="(\.*)"|\s+radioiddetected=(\.*)\s|\s+radioiddetected=(\.*)$ radioiddetected fortinet-fortigate-firewall \s+rai="(\.*)"|\s+rai=(\.*)\s|\s+rai=(\.*)$ rai fortinet-fortigate-firewall \s+rat="(\.*)"|\s+rat=(\.*)\s|\s+rat=(\.*)$ rat fortinet-fortigate-firewall \s+rate="(\.*)"|\s+rate=(\.*)\s|\s+rate=(\.*)$ rate fortinet-fortigate-firewall \s+ratemethod="(\.*)"|\s+ratemethod=(\.*)\s|\s+ratemethod=(\.*)$ ratemethod fortinet-fortigate-firewall \s+rawdata="(\.*)"|\s+rawdata=(\.*)\s|\s+rawdata=(\.*)$ rawdata fortinet-fortigate-firewall \s+rawdataid="(\.*)"|\s+rawdataid=(\.*)\s|\s+rawdataid=(\.*)$ rawdataid fortinet-fortigate-firewall \s+rcode="(\.*)"|\s+rcode=(\.*)\s|\s+rcode=(\.*)$ rcode fortinet-fortigate-firewall \s+rcvdbyte="(\.*)"|\s+rcvdbyte=(\.*)\s|\s+rcvdbyte=(\.*)$ rcvdbyte fortinet-fortigate-firewall \s+rcvddelta="(\.*)"|\s+rcvddelta=(\.*)\s|\s+rcvddelta=(\.*)$ rcvddelta fortinet-fortigate-firewall \s+rcvdpkt="(\.*)"|\s+rcvdpkt=(\.*)\s|\s+rcvdpkt=(\.*)$ rcvdpkt fortinet-fortigate-firewall \s+rcvdpktdelta="(\.*)"|\s+rcvdpktdelta=(\.*)\s|\s+rcvdpktdelta=(\.*)$ rcvdpktdelta fortinet-fortigate-firewall \s+realserverid="(\.*)"|\s+realserverid=(\.*)\s|\s+realserverid=(\.*)$ realserverid fortinet-fortigate-firewall \s+reason="(\.*)"|\s+reason=(\.*)\s|\s+reason=(\.*)$ reason fortinet-fortigate-firewall \s+received="(\.*)"|\s+received=(\.*)\s|\s+received=(\.*)$ received fortinet-fortigate-firewall \s+receivedsignature="(\.*)"|\s+receivedsignature=(\.*)\s|\s+receivedsignature=(\.*)$ receivedsignature fortinet-fortigate-firewall \s+recipient="(\.*)"|\s+recipient=(\.*)\s|\s+recipient=(\.*)$ recipient fortinet-fortigate-firewall \s+red="(\.*)"|\s+red=(\.*)\s|\s+red=(\.*)$ red fortinet-fortigate-firewall \s+ref="(\.*)"|\s+ref=(\.*)\s|\s+ref=(\.*)$ ref fortinet-fortigate-firewall \s+referralurl="(\.*)"|\s+referralurl=(\.*)\s|\s+referralurl=(\.*)$ referralurl fortinet-fortigate-firewall \s+remip="(\.*)"|\s+remip=(\.*)\s|\s+remip=(\.*)$ remip fortinet-fortigate-firewall \s+remote="(\.*)"|\s+remote=(\.*)\s|\s+remote=(\.*)$ remote fortinet-fortigate-firewall \s+remotetunnelid="(\.*)"|\s+remotetunnelid=(\.*)\s|\s+remotetunnelid=(\.*)$ remotetunnelid fortinet-fortigate-firewall \s+remotewtptime="(\.*)"|\s+remotewtptime=(\.*)\s|\s+remotewtptime=(\.*)$ remotewtptime fortinet-fortigate-firewall \s+remport="(\.*)"|\s+remport=(\.*)\s|\s+remport=(\.*)$ remport fortinet-fortigate-firewall \s+replydstintf="(\.*)"|\s+replydstintf=(\.*)\s|\s+replydstintf=(\.*)$ replydstintf fortinet-fortigate-firewall \s+replysrcintf="(\.*)"|\s+replysrcintf=(\.*)\s|\s+replysrcintf=(\.*)$ replysrcintf fortinet-fortigate-firewall \s+reporttype="(\.*)"|\s+reporttype=(\.*)\s|\s+reporttype=(\.*)$ reporttype fortinet-fortigate-firewall \s+reqtype="(\.*)"|\s+reqtype=(\.*)\s|\s+reqtype=(\.*)$ reqtype fortinet-fortigate-firewall \s+request_name="(\.*)"|\s+request_name=(\.*)\s|\s+request_name=(\.*)$ request_name fortinet-fortigate-firewall \s+result="(\.*)"|\s+result=(\.*)\s|\s+result=(\.*)$ result fortinet-fortigate-firewall \s+role="(\.*)"|\s+role=(\.*)\s|\s+role=(\.*)$ role fortinet-fortigate-firewall \s+rssi="(\.*)"|\s+rssi=(\.*)\s|\s+rssi=(\.*)$ rssi fortinet-fortigate-firewall \s+rsso_key="(\.*)"|\s+rsso_key=(\.*)\s|\s+rsso_key=(\.*)$ rsso_key fortinet-fortigate-firewall \s+ruleid="(\.*)"|\s+ruleid=(\.*)\s|\s+ruleid=(\.*)$ ruleid fortinet-fortigate-firewall \s+rulename="(\.*)"|\s+rulename=(\.*)\s|\s+rulename=(\.*)$ rulename fortinet-fortigate-firewall \s+saasapp="(\.*)"|\s+saasapp=(\.*)\s|\s+saasapp=(\.*)$ saasapp fortinet-fortigate-firewall \s+saasname="(\.*)"|\s+saasname=(\.*)\s|\s+saasname=(\.*)$ saasname fortinet-fortigate-firewall \s+saddr="(\.*)"|\s+saddr=(\.*)\s|\s+saddr=(\.*)$ saddr fortinet-fortigate-firewall \s+san="(\.*)"|\s+san=(\.*)\s|\s+san=(\.*)$ san fortinet-fortigate-firewall \s+scantime="(\.*)"|\s+scantime=(\.*)\s|\s+scantime=(\.*)$ scantime fortinet-fortigate-firewall \s+scertcname="(\.*)"|\s+scertcname=(\.*)\s|\s+scertcname=(\.*)$ scertcname fortinet-fortigate-firewall \s+scertissuer="(\.*)"|\s+scertissuer=(\.*)\s|\s+scertissuer=(\.*)$ scertissuer fortinet-fortigate-firewall \s+scope="(\.*)"|\s+scope=(\.*)\s|\s+scope=(\.*)$ scope fortinet-fortigate-firewall \s+security="(\.*)"|\s+security=(\.*)\s|\s+security=(\.*)$ security fortinet-fortigate-firewall \s+selection="(\.*)"|\s+selection=(\.*)\s|\s+selection=(\.*)$ selection fortinet-fortigate-firewall \s+sender="(\.*)"|\s+sender=(\.*)\s|\s+sender=(\.*)$ sender fortinet-fortigate-firewall \s+sensitivity="(\.*)"|\s+sensitivity=(\.*)\s|\s+sensitivity=(\.*)$ sensitivity fortinet-fortigate-firewall \s+sensor="(\.*)"|\s+sensor=(\.*)\s|\s+sensor=(\.*)$ sensor fortinet-fortigate-firewall \s+sentbyte="(\.*)"|\s+sentbyte=(\.*)\s|\s+sentbyte=(\.*)$ sentbyte fortinet-fortigate-firewall \s+sentdelta="(\.*)"|\s+sentdelta=(\.*)\s|\s+sentdelta=(\.*)$ sentdelta fortinet-fortigate-firewall \s+sentpkt="(\.*)"|\s+sentpkt=(\.*)\s|\s+sentpkt=(\.*)$ sentpkt fortinet-fortigate-firewall \s+sentpktdelta="(\.*)"|\s+sentpktdelta=(\.*)\s|\s+sentpktdelta=(\.*)$ sentpktdelta fortinet-fortigate-firewall \s+seq="(\.*)"|\s+seq=(\.*)\s|\s+seq=(\.*)$ seq fortinet-fortigate-firewall \s+seqnum="(\.*)"|\s+seqnum=(\.*)\s|\s+seqnum=(\.*)$ seqnum fortinet-fortigate-firewall \s+serial="(\.*)"|\s+serial=(\.*)\s|\s+serial=(\.*)$ serial fortinet-fortigate-firewall \s+serialno="(\.*)"|\s+serialno=(\.*)\s|\s+serialno=(\.*)$ serialno fortinet-fortigate-firewall \s+server="(\.*)"|\s+server=(\.*)\s|\s+server=(\.*)$ server fortinet-fortigate-firewall \s+serveraddr="(\.*)"|\s+serveraddr=(\.*)\s|\s+serveraddr=(\.*)$ serveraddr fortinet-fortigate-firewall \s+servername="(\.*)"|\s+servername=(\.*)\s|\s+servername=(\.*)$ servername fortinet-fortigate-firewall \s+serverresponsetime="(\.*)"|\s+serverresponsetime=(\.*)\s|\s+serverresponsetime=(\.*)$ serverresponsetime fortinet-fortigate-firewall \s+service="(\.*)"|\s+service=(\.*)\s|\s+service=(\.*)$ service fortinet-fortigate-firewall \s+serviceid="(\.*)"|\s+serviceid=(\.*)\s|\s+serviceid=(\.*)$ serviceid fortinet-fortigate-firewall \s+session_id="(\.*)"|\s+session_id=(\.*)\s|\s+session_id=(\.*)$ session_id fortinet-fortigate-firewall \s+sessionid="(\.*)"|\s+sessionid=(\.*)\s|\s+sessionid=(\.*)$ sessionid fortinet-fortigate-firewall \s+setuprate="(\.*)"|\s+setuprate=(\.*)\s|\s+setuprate=(\.*)$ setuprate fortinet-fortigate-firewall \s+severity="(\.*)"|\s+severity=(\.*)\s|\s+severity=(\.*)$ severity fortinet-fortigate-firewall \s+shaperdroprcvdbyte="(\.*)"|\s+shaperdroprcvdbyte=(\.*)\s|\s+shaperdroprcvdbyte=(\.*)$ shaperdroprcvdbyte fortinet-fortigate-firewall \s+shaperdropsentbyte="(\.*)"|\s+shaperdropsentbyte=(\.*)\s|\s+shaperdropsentbyte=(\.*)$ shaperdropsentbyte fortinet-fortigate-firewall \s+shaperperipdropbyte="(\.*)"|\s+shaperperipdropbyte=(\.*)\s|\s+shaperperipdropbyte=(\.*)$ shaperperipdropbyte fortinet-fortigate-firewall \s+shaperperipname="(\.*)"|\s+shaperperipname=(\.*)\s|\s+shaperperipname=(\.*)$ shaperperipname fortinet-fortigate-firewall \s+shaperrcvdname="(\.*)"|\s+shaperrcvdname=(\.*)\s|\s+shaperrcvdname=(\.*)$ shaperrcvdname fortinet-fortigate-firewall \s+shapersentname="(\.*)"|\s+shapersentname=(\.*)\s|\s+shapersentname=(\.*)$ shapersentname fortinet-fortigate-firewall \s+shapingpolicyid="(\.*)"|\s+shapingpolicyid=(\.*)\s|\s+shapingpolicyid=(\.*)$ shapingpolicyid fortinet-fortigate-firewall \s+shapingpolicyname="(\.*)"|\s+shapingpolicyname=(\.*)\s|\s+shapingpolicyname=(\.*)$ shapingpolicyname fortinet-fortigate-firewall \s+sharename="(\.*)"|\s+sharename=(\.*)\s|\s+sharename=(\.*)$ sharename fortinet-fortigate-firewall \s+signal="(\.*)"|\s+signal=(\.*)\s|\s+signal=(\.*)$ signal fortinet-fortigate-firewall \s+size="(\.*)"|\s+size=(\.*)\s|\s+size=(\.*)$ size fortinet-fortigate-firewall \s+ski="(\.*)"|\s+ski=(\.*)\s|\s+ski=(\.*)$ ski fortinet-fortigate-firewall \s+slamap="(\.*)"|\s+slamap=(\.*)\s|\s+slamap=(\.*)$ slamap fortinet-fortigate-firewall \s+slatargetid="(\.*)"|\s+slatargetid=(\.*)\s|\s+slatargetid=(\.*)$ slatargetid fortinet-fortigate-firewall \s+slctdrmamode="(\.*)"|\s+slctdrmamode=(\.*)\s|\s+slctdrmamode=(\.*)$ slctdrmamode fortinet-fortigate-firewall \s+slot="(\.*)"|\s+slot=(\.*)\s|\s+slot=(\.*)$ slot fortinet-fortigate-firewall \s+sn="(\.*)"|\s+sn=(\.*)\s|\s+sn=(\.*)$ sn fortinet-fortigate-firewall \s+snclosest="(\.*)"|\s+snclosest=(\.*)\s|\s+snclosest=(\.*)$ snclosest fortinet-fortigate-firewall \s+sndetected="(\.*)"|\s+sndetected=(\.*)\s|\s+sndetected=(\.*)$ sndetected fortinet-fortigate-firewall \s+snetwork="(\.*)"|\s+snetwork=(\.*)\s|\s+snetwork=(\.*)$ snetwork fortinet-fortigate-firewall \s+sni="(\.*)"|\s+sni=(\.*)\s|\s+sni=(\.*)$ sni fortinet-fortigate-firewall \s+snmeshparent="(\.*)"|\s+snmeshparent=(\.*)\s|\s+snmeshparent=(\.*)$ snmeshparent fortinet-fortigate-firewall \s+snprev="(\.*)"|\s+snprev=(\.*)\s|\s+snprev=(\.*)$ snprev fortinet-fortigate-firewall \s+snr="(\.*)"|\s+snr=(\.*)\s|\s+snr=(\.*)$ snr fortinet-fortigate-firewall \s+source_mac="(\.*)"|\s+source_mac=(\.*)\s|\s+source_mac=(\.*)$ source_mac fortinet-fortigate-firewall \s+speedtestserver="(\.*)"|\s+speedtestserver=(\.*)\s|\s+speedtestserver=(\.*)$ speedtestserver fortinet-fortigate-firewall \s+spi="(\.*)"|\s+spi=(\.*)\s|\s+spi=(\.*)$ spi fortinet-fortigate-firewall \s+src_int="(\.*)"|\s+src_int=(\.*)\s|\s+src_int=(\.*)$ src_int fortinet-fortigate-firewall \s+src_port="(\.*)"|\s+src_port=(\.*)\s|\s+src_port=(\.*)$ src_port fortinet-fortigate-firewall \s+srccity="(\.*)"|\s+srccity=(\.*)\s|\s+srccity=(\.*)$ srccity fortinet-fortigate-firewall \s+srccountry="(\.*)"|\s+srccountry=(\.*)\s|\s+srccountry=(\.*)$ srccountry fortinet-fortigate-firewall \s+srcdomain="(\.*)"|\s+srcdomain=(\.*)\s|\s+srcdomain=(\.*)$ srcdomain fortinet-fortigate-firewall \s+srcfamily="(\.*)"|\s+srcfamily=(\.*)\s|\s+srcfamily=(\.*)$ srcfamily fortinet-fortigate-firewall \s+srchwvendor="(\.*)"|\s+srchwvendor=(\.*)\s|\s+srchwvendor=(\.*)$ srchwvendor fortinet-fortigate-firewall \s+srchwversion="(\.*)"|\s+srchwversion=(\.*)\s|\s+srchwversion=(\.*)$ srchwversion fortinet-fortigate-firewall \s+srcinetsvc="(\.*)"|\s+srcinetsvc=(\.*)\s|\s+srcinetsvc=(\.*)$ srcinetsvc fortinet-fortigate-firewall \s+srcintf="(\.*)"|\s+srcintf=(\.*)\s|\s+srcintf=(\.*)$ srcintf fortinet-fortigate-firewall \s+srcintfrole="(\.*)"|\s+srcintfrole=(\.*)\s|\s+srcintfrole=(\.*)$ srcintfrole fortinet-fortigate-firewall \s+srcip="(\.*)"|\s+srcip=(\.*)\s|\s+srcip=(\.*)$ srcip fortinet-fortigate-firewall \s+srcmac="(\.*)"|\s+srcmac=(\.*)\s|\s+srcmac=(\.*)$ srcmac fortinet-fortigate-firewall \s+srcmacvendor="(\.*)"|\s+srcmacvendor=(\.*)\s|\s+srcmacvendor=(\.*)$ srcmacvendor fortinet-fortigate-firewall \s+srcname="(\.*)"|\s+srcname=(\.*)\s|\s+srcname=(\.*)$ srcname fortinet-fortigate-firewall \s+srcport="(\.*)"|\s+srcport=(\.*)\s|\s+srcport=(\.*)$ srcport fortinet-fortigate-firewall \s+srcregion="(\.*)"|\s+srcregion=(\.*)\s|\s+srcregion=(\.*)$ srcregion fortinet-fortigate-firewall \s+srcremote="(\.*)"|\s+srcremote=(\.*)\s|\s+srcremote=(\.*)$ srcremote fortinet-fortigate-firewall \s+srcreputation="(\.*)"|\s+srcreputation=(\.*)\s|\s+srcreputation=(\.*)$ srcreputation fortinet-fortigate-firewall \s+srcserver="(\.*)"|\s+srcserver=(\.*)\s|\s+srcserver=(\.*)$ srcserver fortinet-fortigate-firewall \s+srcssid="(\.*)"|\s+srcssid=(\.*)\s|\s+srcssid=(\.*)$ srcssid fortinet-fortigate-firewall \s+srcswversion="(\.*)"|\s+srcswversion=(\.*)\s|\s+srcswversion=(\.*)$ srcswversion fortinet-fortigate-firewall \s+srcthreatfeed="(\.*)"|\s+srcthreatfeed=(\.*)\s|\s+srcthreatfeed=(\.*)$ srcthreatfeed fortinet-fortigate-firewall \s+srcuuid="(\.*)"|\s+srcuuid=(\.*)\s|\s+srcuuid=(\.*)$ srcuuid fortinet-fortigate-firewall \s+sscname="(\.*)"|\s+sscname=(\.*)\s|\s+sscname=(\.*)$ sscname fortinet-fortigate-firewall \s+ssh="(\.*)"|\s+ssh=(\.*)\s|\s+ssh=(\.*)$ ssh fortinet-fortigate-firewall \s+ssid="(\.*)"|\s+ssid=(\.*)\s|\s+ssid=(\.*)$ ssid fortinet-fortigate-firewall \s+ssl="(\.*)"|\s+ssl=(\.*)\s|\s+ssl=(\.*)$ ssl fortinet-fortigate-firewall \s+sslaction="(\.*)"|\s+sslaction=(\.*)\s|\s+sslaction=(\.*)$ sslaction fortinet-fortigate-firewall \s+ssllocal="(\.*)"|\s+ssllocal=(\.*)\s|\s+ssllocal=(\.*)$ ssllocal fortinet-fortigate-firewall \s+sslremote="(\.*)"|\s+sslremote=(\.*)\s|\s+sslremote=(\.*)$ sslremote fortinet-fortigate-firewall \s+stacount="(\.*)"|\s+stacount=(\.*)\s|\s+stacount=(\.*)$ stacount fortinet-fortigate-firewall \s+stage="(\.*)"|\s+stage=(\.*)\s|\s+stage=(\.*)$ stage fortinet-fortigate-firewall \s+stamac="(\.*)"|\s+stamac=(\.*)\s|\s+stamac=(\.*)$ stamac fortinet-fortigate-firewall \s+state="(\.*)"|\s+state=(\.*)\s|\s+state=(\.*)$ state fortinet-fortigate-firewall \s+status="(\.*)"|\s+status=(\.*)\s|\s+status=(\.*)$ status fortinet-fortigate-firewall \s+stitch="(\.*)"|\s+stitch=(\.*)\s|\s+stitch=(\.*)$ stitch fortinet-fortigate-firewall \s+stitchaction="(\.*)"|\s+stitchaction=(\.*)\s|\s+stitchaction=(\.*)$ stitchaction fortinet-fortigate-firewall \s+subject="(\.*)"|\s+subject=(\.*)\s|\s+subject=(\.*)$ subject fortinet-fortigate-firewall \s+submodule="(\.*)"|\s+submodule=(\.*)\s|\s+submodule=(\.*)$ submodule fortinet-fortigate-firewall \s+subservice="(\.*)"|\s+subservice=(\.*)\s|\s+subservice=(\.*)$ subservice fortinet-fortigate-firewall \s+subtype="(\.*)"|\s+subtype=(\.*)\s|\s+subtype=(\.*)$ subtype fortinet-fortigate-firewall \s+successcount="(\.*)"|\s+successcount=(\.*)\s|\s+successcount=(\.*)$ successcount fortinet-fortigate-firewall \s+switchaclid="(\.*)"|\s+switchaclid=(\.*)\s|\s+switchaclid=(\.*)$ switchaclid fortinet-fortigate-firewall \s+switchautoip="(\.*)"|\s+switchautoip=(\.*)\s|\s+switchautoip=(\.*)$ switchautoip fortinet-fortigate-firewall \s+switchid="(\.*)"|\s+switchid=(\.*)\s|\s+switchid=(\.*)$ switchid fortinet-fortigate-firewall \s+switchinterface="(\.*)"|\s+switchinterface=(\.*)\s|\s+switchinterface=(\.*)$ switchinterface fortinet-fortigate-firewall \s+switchl="(\.*)"|\s+switchl=(\.*)\s|\s+switchl=(\.*)$ switchl fortinet-fortigate-firewall \s+switchmirrorsession="(\.*)"|\s+switchmirrorsession=(\.*)\s|\s+switchmirrorsession=(\.*)$ switchmirrorsession fortinet-fortigate-firewall \s+switchphysicalport="(\.*)"|\s+switchphysicalport=(\.*)\s|\s+switchphysicalport=(\.*)$ switchphysicalport fortinet-fortigate-firewall \s+switchproto="(\.*)"|\s+switchproto=(\.*)\s|\s+switchproto=(\.*)$ switchproto fortinet-fortigate-firewall \s+switchsysteminterface="(\.*)"|\s+switchsysteminterface=(\.*)\s|\s+switchsysteminterface=(\.*)$ switchsysteminterface fortinet-fortigate-firewall \s+switchtrunk="(\.*)"|\s+switchtrunk=(\.*)\s|\s+switchtrunk=(\.*)$ switchtrunk fortinet-fortigate-firewall \s+switchtrunkinterface="(\.*)"|\s+switchtrunkinterface=(\.*)\s|\s+switchtrunkinterface=(\.*)$ switchtrunkinterface fortinet-fortigate-firewall \s+sysuptime="(\.*)"|\s+sysuptime=(\.*)\s|\s+sysuptime=(\.*)$ sysuptime fortinet-fortigate-firewall \s+tamac="(\.*)"|\s+tamac=(\.*)\s|\s+tamac=(\.*)$ tamac fortinet-fortigate-firewall \s+threattype="(\.*)"|\s+threattype=(\.*)\s|\s+threattype=(\.*)$ threattype fortinet-fortigate-firewall \s+ticket="(\.*)"|\s+ticket=(\.*)\s|\s+ticket=(\.*)$ ticket fortinet-fortigate-firewall \s+time="(\.*)"|\s+time=(\.*)\s|\s+time=(\.*)$ time fortinet-fortigate-firewall \s+timeoutdelete="(\.*)"|\s+timeoutdelete=(\.*)\s|\s+timeoutdelete=(\.*)$ timeoutdelete fortinet-fortigate-firewall \s+timestamp="(\.*)"|\s+timestamp=(\.*)\s|\s+timestamp=(\.*)$ timestamp fortinet-fortigate-firewall \s+tlsver="(\.*)"|\s+tlsver=(\.*)\s|\s+tlsver=(\.*)$ tlsver fortinet-fortigate-firewall \s+to="(\.*)"|\s+to=(\.*)\s|\s+to=(\.*)$ to fortinet-fortigate-firewall \s+to_vcluster="(\.*)"|\s+to_vcluster=(\.*)\s|\s+to_vcluster=(\.*)$ to_vcluster fortinet-fortigate-firewall \s+total="(\.*)"|\s+total=(\.*)\s|\s+total=(\.*)$ total fortinet-fortigate-firewall \s+totalsession="(\.*)"|\s+totalsession=(\.*)\s|\s+totalsession=(\.*)$ totalsession fortinet-fortigate-firewall \s+traffic="(\.*)"|\s+traffic=(\.*)\s|\s+traffic=(\.*)$ traffic fortinet-fortigate-firewall \s+trandisp="(\.*)"|\s+trandisp=(\.*)\s|\s+trandisp=(\.*)$ trandisp fortinet-fortigate-firewall \s+tranip="(\.*)"|\s+tranip=(\.*)\s|\s+tranip=(\.*)$ tranip fortinet-fortigate-firewall \s+tranport="(\.*)"|\s+tranport=(\.*)\s|\s+tranport=(\.*)$ tranport fortinet-fortigate-firewall \s+transid="(\.*)"|\s+transid=(\.*)\s|\s+transid=(\.*)$ transid fortinet-fortigate-firewall \s+transip="(\.*)"|\s+transip=(\.*)\s|\s+transip=(\.*)$ transip fortinet-fortigate-firewall \s+translationid="(\.*)"|\s+translationid=(\.*)\s|\s+translationid=(\.*)$ translationid fortinet-fortigate-firewall \s+transport="(\.*)"|\s+transport=(\.*)\s|\s+transport=(\.*)$ transport fortinet-fortigate-firewall \s+trigger="(\.*)"|\s+trigger=(\.*)\s|\s+trigger=(\.*)$ trigger fortinet-fortigate-firewall \s+trueclntip="(\.*)"|\s+trueclntip=(\.*)\s|\s+trueclntip=(\.*)$ trueclntip fortinet-fortigate-firewall \s+tunnel="(\.*)"|\s+tunnel=(\.*)\s|\s+tunnel=(\.*)$ tunnel fortinet-fortigate-firewall \s+tunnelid="(\.*)"|\s+tunnelid=(\.*)\s|\s+tunnelid=(\.*)$ tunnelid fortinet-fortigate-firewall \s+tunnelip="(\.*)"|\s+tunnelip=(\.*)\s|\s+tunnelip=(\.*)$ tunnelip fortinet-fortigate-firewall \s+tunneltype="(\.*)"|\s+tunneltype=(\.*)\s|\s+tunneltype=(\.*)$ tunneltype fortinet-fortigate-firewall \s+type="(\.*)"|\s+type=(\.*)\s|\s+type=(\.*)$ type fortinet-fortigate-firewall \s+tz="(\.*)"|\s+tz=(\.*)\s|\s+tz=(\.*)$ tz fortinet-fortigate-firewall \s+ufseid="(\.*)"|\s+ufseid=(\.*)\s|\s+ufseid=(\.*)$ ufseid fortinet-fortigate-firewall \s+ufseidaddr="(\.*)"|\s+ufseidaddr=(\.*)\s|\s+ufseidaddr=(\.*)$ ufseidaddr fortinet-fortigate-firewall \s+uggsn="(\.*)"|\s+uggsn=(\.*)\s|\s+uggsn=(\.*)$ uggsn fortinet-fortigate-firewall \s+ugsn="(\.*)"|\s+ugsn=(\.*)\s|\s+ugsn=(\.*)$ ugsn fortinet-fortigate-firewall \s+ui="(\.*)"|\s+ui=(\.*)\s|\s+ui=(\.*)$ ui fortinet-fortigate-firewall \s+uli="(\.*)"|\s+uli=(\.*)\s|\s+uli=(\.*)$ uli fortinet-fortigate-firewall \s+ulimcc="(\.*)"|\s+ulimcc=(\.*)\s|\s+ulimcc=(\.*)$ ulimcc fortinet-fortigate-firewall \s+ulimnc="(\.*)"|\s+ulimnc=(\.*)\s|\s+ulimnc=(\.*)$ ulimnc fortinet-fortigate-firewall \s+unauthuser="(\.*)"|\s+unauthuser=(\.*)\s|\s+unauthuser=(\.*)$ unauthuser fortinet-fortigate-firewall \s+unauthusersource="(\.*)"|\s+unauthusersource=(\.*)\s|\s+unauthusersource=(\.*)$ unauthusersource fortinet-fortigate-firewall \s+unit="(\.*)"|\s+unit=(\.*)\s|\s+unit=(\.*)$ unit fortinet-fortigate-firewall \s+upbandwidthmeasured="(\.*)"|\s+upbandwidthmeasured=(\.*)\s|\s+upbandwidthmeasured=(\.*)$ upbandwidthmeasured fortinet-fortigate-firewall \s+upgradedevice="(\.*)"|\s+upgradedevice=(\.*)\s|\s+upgradedevice=(\.*)$ upgradedevice fortinet-fortigate-firewall \s+upteid="(\.*)"|\s+upteid=(\.*)\s|\s+upteid=(\.*)$ upteid fortinet-fortigate-firewall \s+url="(\.*)"|\s+url=(\.*)\s|\s+url=(\.*)$ url fortinet-fortigate-firewall \s+urlfilteridx="(\.*)"|\s+urlfilteridx=(\.*)\s|\s+urlfilteridx=(\.*)$ urlfilteridx fortinet-fortigate-firewall \s+urlfilterlist="(\.*)"|\s+urlfilterlist=(\.*)\s|\s+urlfilterlist=(\.*)$ urlfilterlist fortinet-fortigate-firewall \s+urlsource="(\.*)"|\s+urlsource=(\.*)\s|\s+urlsource=(\.*)$ urlsource fortinet-fortigate-firewall \s+urltype="(\.*)"|\s+urltype=(\.*)\s|\s+urltype=(\.*)$ urltype fortinet-fortigate-firewall \s+used="(\.*)"|\s+used=(\.*)\s|\s+used=(\.*)$ used fortinet-fortigate-firewall \s+used_for="(\.*)"|\s+used_for=(\.*)\s|\s+used_for=(\.*)$ used_for fortinet-fortigate-firewall \s+user="(\.*)"|\s+user=(\.*)\s|\s+user=(\.*)$ user fortinet-fortigate-firewall \s+user_data="(\.*)"|\s+user_data=(\.*)\s|\s+user_data=(\.*)$ user_data fortinet-fortigate-firewall \s+useractivity="(\.*)"|\s+useractivity=(\.*)\s|\s+useractivity=(\.*)$ useractivity fortinet-fortigate-firewall \s+useralt="(\.*)"|\s+useralt=(\.*)\s|\s+useralt=(\.*)$ useralt fortinet-fortigate-firewall \s+usgsn="(\.*)"|\s+usgsn=(\.*)\s|\s+usgsn=(\.*)$ usgsn fortinet-fortigate-firewall \s+utmaction="(\.*)"|\s+utmaction=(\.*)\s|\s+utmaction=(\.*)$ utmaction fortinet-fortigate-firewall \s+vap="(\.*)"|\s+vap=(\.*)\s|\s+vap=(\.*)$ vap fortinet-fortigate-firewall \s+vapmode="(\.*)"|\s+vapmode=(\.*)\s|\s+vapmode=(\.*)$ vapmode fortinet-fortigate-firewall \s+vcluster="(\.*)"|\s+vcluster=(\.*)\s|\s+vcluster=(\.*)$ vcluster fortinet-fortigate-firewall \s+vcluster_member="(\.*)"|\s+vcluster_member=(\.*)\s|\s+vcluster_member=(\.*)$ vcluster_member fortinet-fortigate-firewall \s+vcluster_state="(\.*)"|\s+vcluster_state=(\.*)\s|\s+vcluster_state=(\.*)$ vcluster_state fortinet-fortigate-firewall \s+vd="(\.*)"|\s+vd=(\.*)\s|\s+vd=(\.*)$ vd fortinet-fortigate-firewall \s+vdname="(\.*)"|\s+vdname=(\.*)\s|\s+vdname=(\.*)$ vdname fortinet-fortigate-firewall \s+vendor="(\.*)"|\s+vendor=(\.*)\s|\s+vendor=(\.*)$ vendor fortinet-fortigate-firewall \s+vendorurl="(\.*)"|\s+vendorurl=(\.*)\s|\s+vendorurl=(\.*)$ vendorurl fortinet-fortigate-firewall \s+version="(\.*)"|\s+version=(\.*)\s|\s+version=(\.*)$ version fortinet-fortigate-firewall \s+versionmax="(\.*)"|\s+versionmax=(\.*)\s|\s+versionmax=(\.*)$ versionmax fortinet-fortigate-firewall \s+versionmin="(\.*)"|\s+versionmin=(\.*)\s|\s+versionmin=(\.*)$ versionmin fortinet-fortigate-firewall \s+videocategoryid="(\.*)"|\s+videocategoryid=(\.*)\s|\s+videocategoryid=(\.*)$ videocategoryid fortinet-fortigate-firewall \s+videocategoryname="(\.*)"|\s+videocategoryname=(\.*)\s|\s+videocategoryname=(\.*)$ videocategoryname fortinet-fortigate-firewall \s+videochannelid="(\.*)"|\s+videochannelid=(\.*)\s|\s+videochannelid=(\.*)$ videochannelid fortinet-fortigate-firewall \s+videodesc="(\.*)"|\s+videodesc=(\.*)\s|\s+videodesc=(\.*)$ videodesc fortinet-fortigate-firewall \s+videoid="(\.*)"|\s+videoid=(\.*)\s|\s+videoid=(\.*)$ videoid fortinet-fortigate-firewall \s+videoinfosource="(\.*)"|\s+videoinfosource=(\.*)\s|\s+videoinfosource=(\.*)$ videoinfosource fortinet-fortigate-firewall \s+videotitle="(\.*)"|\s+videotitle=(\.*)\s|\s+videotitle=(\.*)$ videotitle fortinet-fortigate-firewall \s+violations="(\.*)"|\s+violations=(\.*)\s|\s+violations=(\.*)$ violations fortinet-fortigate-firewall \s+vip="(\.*)"|\s+vip=(\.*)\s|\s+vip=(\.*)$ vip fortinet-fortigate-firewall \s+virtual="(\.*)"|\s+virtual=(\.*)\s|\s+virtual=(\.*)$ virtual fortinet-fortigate-firewall \s+virus="(\.*)"|\s+virus=(\.*)\s|\s+virus=(\.*)$ virus fortinet-fortigate-firewall \s+viruscat="(\.*)"|\s+viruscat=(\.*)\s|\s+viruscat=(\.*)$ viruscat fortinet-fortigate-firewall \s+virusid="(\.*)"|\s+virusid=(\.*)\s|\s+virusid=(\.*)$ virusid fortinet-fortigate-firewall \s+vlan="(\.*)"|\s+vlan=(\.*)\s|\s+vlan=(\.*)$ vlan fortinet-fortigate-firewall \s+voip="(\.*)"|\s+voip=(\.*)\s|\s+voip=(\.*)$ voip fortinet-fortigate-firewall \s+voip_proto="(\.*)"|\s+voip_proto=(\.*)\s|\s+voip_proto=(\.*)$ voip_proto fortinet-fortigate-firewall \s+vpn="(\.*)"|\s+vpn=(\.*)\s|\s+vpn=(\.*)$ vpn fortinet-fortigate-firewall \s+vpntunnel="(\.*)"|\s+vpntunnel=(\.*)\s|\s+vpntunnel=(\.*)$ vpntunnel fortinet-fortigate-firewall \s+vpntype="(\.*)"|\s+vpntype=(\.*)\s|\s+vpntype=(\.*)$ vpntype fortinet-fortigate-firewall \s+vrf="(\.*)"|\s+vrf=(\.*)\s|\s+vrf=(\.*)$ vrf fortinet-fortigate-firewall \s+vulncat="(\.*)"|\s+vulncat=(\.*)\s|\s+vulncat=(\.*)$ vulncat fortinet-fortigate-firewall \s+vulncnt="(\.*)"|\s+vulncnt=(\.*)\s|\s+vulncnt=(\.*)$ vulncnt fortinet-fortigate-firewall \s+vulnid="(\.*)"|\s+vulnid=(\.*)\s|\s+vulnid=(\.*)$ vulnid fortinet-fortigate-firewall \s+vulnname="(\.*)"|\s+vulnname=(\.*)\s|\s+vulnname=(\.*)$ vulnname fortinet-fortigate-firewall \s+vulnresult="(\.*)"|\s+vulnresult=(\.*)\s|\s+vulnresult=(\.*)$ vulnresult fortinet-fortigate-firewall \s+vwlid="(\.*)"|\s+vwlid=(\.*)\s|\s+vwlid=(\.*)$ vwlid fortinet-fortigate-firewall \s+vwlname="(\.*)"|\s+vwlname=(\.*)\s|\s+vwlname=(\.*)$ vwlname fortinet-fortigate-firewall \s+vwlquality="(\.*)"|\s+vwlquality=(\.*)\s|\s+vwlquality=(\.*)$ vwlquality fortinet-fortigate-firewall \s+vwlservice="(\.*)"|\s+vwlservice=(\.*)\s|\s+vwlservice=(\.*)$ vwlservice fortinet-fortigate-firewall \s+vwpvlanid="(\.*)"|\s+vwpvlanid=(\.*)\s|\s+vwpvlanid=(\.*)$ vwpvlanid fortinet-fortigate-firewall \s+waf="(\.*)"|\s+waf=(\.*)\s|\s+waf=(\.*)$ waf fortinet-fortigate-firewall \s+wanin="(\.*)"|\s+wanin=(\.*)\s|\s+wanin=(\.*)$ wanin fortinet-fortigate-firewall \s+waninfo="(\.*)"|\s+waninfo=(\.*)\s|\s+waninfo=(\.*)$ waninfo fortinet-fortigate-firewall \s+wanoptapptype="(\.*)"|\s+wanoptapptype=(\.*)\s|\s+wanoptapptype=(\.*)$ wanoptapptype fortinet-fortigate-firewall \s+wanout="(\.*)"|\s+wanout=(\.*)\s|\s+wanout=(\.*)$ wanout fortinet-fortigate-firewall \s+weakwepiv="(\.*)"|\s+weakwepiv=(\.*)\s|\s+weakwepiv=(\.*)$ weakwepiv fortinet-fortigate-firewall \s+webfilter="(\.*)"|\s+webfilter=(\.*)\s|\s+webfilter=(\.*)$ webfilter fortinet-fortigate-firewall \s+webmailprovider="(\.*)"|\s+webmailprovider=(\.*)\s|\s+webmailprovider=(\.*)$ webmailprovider fortinet-fortigate-firewall \s+wscode="(\.*)"|\s+wscode=(\.*)\s|\s+wscode=(\.*)$ wscode fortinet-fortigate-firewall \s+xauthgroup="(\.*)"|\s+xauthgroup=(\.*)\s|\s+xauthgroup=(\.*)$ xauthgroup fortinet-fortigate-firewall \s+xauthuser="(\.*)"|\s+xauthuser=(\.*)\s|\s+xauthuser=(\.*)$ xauthuser