fortinet-fortigate-firewall Fortigate messages grouped 100010 018432$ Attack detected by UCP/TCP anomaly fortios.event.anomaly,fortios.category.anomaly,fortios.severity.alert 100010 018433$ Attack detected by ICMP anomaly fortios.event.anomaly,fortios.category.anomaly,fortios.severity.alert 100010 018434$ Attack detected by other anomaly fortios.event.anomaly,fortios.category.anomaly,fortios.severity.alert 100010 028672$ Application control IM-basic fortios.event.app-ctrl,fortios.category.signature,fortios.severity.information 100010 028673$ Application control IM fortios.event.app-ctrl,fortios.category.signature,fortios.severity.information 100010 028674$ Application control IM (chat message count) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.information 100010 028675$ Application control IM (file) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.information 100010 028676$ Application control IM (chat) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.information 100010 028677$ Application control IM (chat blocked) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.information 100010 028678$ Application control IM (blocked) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.information 100010 028704$ Application control (IPS) (pass) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.information 100010 028705$ Application control (IPS) (block) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.warning 100010 028706$ Application control (IPS) (reset) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.warning 100010 028720$ Application control IM (SSH) (pass) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.information 100010 028721$ Application control IM (SSH) (block) fortios.event.app-ctrl,fortios.category.signature,fortios.severity.warning 100010 028736$ Application control port enforcement fortios.event.app-ctrl,fortios.category.port-violation,fortios.severity.warning 100010 028737$ Application control protocol enforcement fortios.event.app-ctrl,fortios.category.protocol-violation,fortios.severity.warning 100010 024576$ Data leak detected by specified DLP sensor rule fortios.event.dlp,fortios.category.dlp,fortios.severity.warning 100010 024577$ Data leak detected by specified DLP sensor rule fortios.event.dlp,fortios.category.dlp,fortios.severity.notice 100010 024578$ DLP fingerprint document source notice fortios.event.dlp,fortios.category.dlp-docsource,fortios.severity.notice 100010 024579$ DLP fingerprint document source error fortios.event.dlp,fortios.category.dlp-docsource,fortios.severity.warning 100010 054000$ DNS query message fortios.event.dns,fortios.category.dns-query,fortios.severity.information 100010 054200$ DNS resolution error message fortios.event.dns,fortios.category.dns-response,fortios.severity.error 100010 054400$ Domain blocked because it is in the domain-filter list fortios.event.dns,fortios.category.dns-response,fortios.severity.warning 100010 054401$ Domain allowed because it is in the domain-filter list fortios.event.dns,fortios.category.dns-response,fortios.severity.information 100010 054600$ Domain blocked by DNS botnet C&C (IP) fortios.event.dns,fortios.category.dns-response,fortios.severity.warning 100010 054601$ Domain blocked by DNS botnet C&C (Domain) fortios.event.dns,fortios.category.dns-response,fortios.severity.warning 100010 054800$ FortiGuard rating error warning fortios.event.dns,fortios.category.dns-response,fortios.severity.warning 100010 054801$ FortiGuard rating error occurred fortios.event.dns,fortios.category.dns-response,fortios.severity.error 100010 054802$ Domain is monitored fortios.event.dns,fortios.category.dns-response,fortios.severity.notice 100010 054803$ Domain belongs to a denied category in policy fortios.event.dns,fortios.category.dns-response,fortios.severity.warning 100010 054804$ DNS Safe Search enforced fortios.event.dns,fortios.category.dns-response,fortios.severity.notice 100010 054805$ DNS local query fortios.event.dns,fortios.category.dns-response,fortios.severity.information 100010 020480$ SPAM notification fortios.event.emailfilter,fortios.category.spam,fortios.severity.notice 100010 020481$ Email message fortios.event.emailfilter,fortios.category.email,fortios.severity.information 100010 020482$ Banned word notification fortios.event.emailfilter,fortios.category.bannedword,fortios.severity.notice 100010 020509$ FortiGuard error message fortios.event.emailfilter,fortios.category.ftgd_err,fortios.severity.notice 100010 020510$ Webmail message fortios.event.emailfilter,fortios.category.webmail,fortios.severity.information 100010 020002$ Domain name of alert email sender unresolvable fortios.event.event,fortios.category.system,fortios.severity.notice 100010 020003$ Alert email send status failed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 020004$ Policy too big for installation fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020005$ Modem PPP link up fortios.event.event,fortios.category.system,fortios.severity.information 100010 020006$ Modem PPP link down fortios.event.event,fortios.category.system,fortios.severity.information 100010 020007$ Socket is exhausted fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020008$ IPv6 policy too big for installation fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020010$ Kernel error fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020016$ Modem exceeded redial limit fortios.event.event,fortios.category.system,fortios.severity.information 100010 020017$ Modem failed to open fortios.event.event,fortios.category.system,fortios.severity.information 100010 020020$ USB modem detected fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020021$ Alert email resent fortios.event.event,fortios.category.system,fortios.severity.information 100010 020022$ USB modem removed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020023$ USB LTE modem detected fortios.event.event,fortios.category.system,fortios.severity.information 100010 020024$ USB LTE modem removed fortios.event.event,fortios.category.system,fortios.severity.information 100010 020025$ Report generated successfully fortios.event.event,fortios.category.system,fortios.severity.notice 100010 020026$ Report generation failed fortios.event.event,fortios.category.system,fortios.severity.error 100010 020028$ Report database recreated fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020031$ RADVD out of memory fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020032$ RADVD interface not found fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020033$ RADVD mobile IPv6 extensions used fortios.event.event,fortios.category.system,fortios.severity.information 100010 020034$ RADVD mobile IPv6 MinRtrAdvInterval out of range fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020035$ RADVD MinRtrAdvInterval out of range fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020036$ RADVD mobile IPv6 MaxRtrAdvInterval out of range fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020037$ RADVD MaxRtrAdvInterval out of range fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020039$ RADVD AdvLinkMTU too small fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020040$ RADVD AdvReachableTime too small fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020041$ RADVD AdvCurHopLimit too big fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020042$ RADVD AdvCurHopLimit out of range fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020043$ RADVD HomeAgentLifetime out of range fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020044$ RADVD AdvHomeAgentFlag not set fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020045$ RADVD invalid prefix length fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020046$ RADVD AdvValidLifetime less than AdvPreferredLifetime fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020061$ RADVD received unwanted ICMPv6 packet fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020062$ RADVD received ICMPv6 RA packet with invalid length fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020063$ RADVD received ICMPv6 RA packet with non-link local source address fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020064$ RADVD received ICMPv6 RS packet with invalid length fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020065$ RADVD received ICMPv6 RS/RA packet with invalid code fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020066$ RADVD received ICMPv6 RS/RA packet with invalid hop limit fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020067$ RADVD local AdvCurHopLimit disagrees with remote site fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020068$ RADVD local AdvManagedFlag disagrees with remote site fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020069$ RADVD local AdvOtherConfigFlag disagrees with remote site fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020070$ RADVD local AdvReachableTime disagrees with remote site fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020071$ RADVD local AdvRetransTimer disagrees with remote site fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020072$ RADVD extra data in RA packet found fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020073$ RADVD RA packet option length zero fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020074$ RADVD RA packet option length greater than total length fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020075$ RADVD local AdvLinkMTU disagrees with remote site fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020077$ Interface AdvPreferredLifetime on our interface does not agree with a remote site fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020078$ RADVD found invalid option in RA packet from remote site fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020080$ RADVD receive message failed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020081$ RADVD received invalid IPv6 hop limit fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020082$ RADVD received invalid IPv6 packet info fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020083$ RADVD all-routers membership check failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020084$ RADVD send message failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020085$ Session clashed fortios.event.event,fortios.category.system,fortios.severity.information 100010 020090$ Interface link status changed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 020099$ Interface status changed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020100$ FortiGuard web filter category list updated fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020101$ FortiGuard web filter license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020102$ FortiGuard antispam license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020103$ FortiGuard antivirus license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020104$ FortiGuard IPS license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020107$ Log upload error fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020108$ Log upload completed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 020109$ FortiGuard web filter license expired fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020113$ IPSA database download failed fortios.event.event,fortios.category.system,fortios.severity.error 100010 020114$ IPSA disabled: self test failed fortios.event.event,fortios.category.system,fortios.severity.error 100010 020115$ IPSA driver update failed fortios.event.event,fortios.category.system,fortios.severity.error 100010 020116$ FortiGuard antispam license expired fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020117$ FortiGuard antivirus license expired fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020118$ FortiGuard webfilter reachable fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020119$ FortiGuard webfilter unreachable fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020120$ FortiManager Cloud license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020121$ FortiAnalyzer Cloud license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020122$ SD-WAN Overlay Controller license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020123$ SD-WAN Monitoring license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020124$ VM-S license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020125$ Security Rating license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020126$ IPAM Controller license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020127$ IoT device identification license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020128$ FortiSandbox Cloud license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020129$ FortiAnalyzer Cloud premium license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020130$ FortiClient EMS Cloud license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020131$ FortiManager Cloud Account Level license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020132$ FortiSandbox Cloud Account Level license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020133$ Firewall policy expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020134$ Firewall policy expired fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020135$ FortiGuard AI-Based Sandbox Service license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020200$ FIPS CC self-test initiated fortios.event.event,fortios.category.system,fortios.severity.notice 100010 020201$ FIPS ALL CC self-tests initiated fortios.event.event,fortios.category.system,fortios.severity.notice 100010 020202$ Disk partitioning or formatting Error fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020203$ Daemon shutdown fortios.event.event,fortios.category.system,fortios.severity.information 100010 020204$ Daemon started fortios.event.event,fortios.category.system,fortios.severity.information 100010 020205$ Format disk requested fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020206$ Scan disk requested fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020207$ RADVD local AdvValidLifetime disagrees with remote site fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020208$ Zombie daemon cleanup fortios.event.event,fortios.category.system,fortios.severity.information 100010 020209$ Disk unavailable fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020210$ SSD TRIM started fortios.event.event,fortios.category.system,fortios.severity.information 100010 020211$ SSD TRIM finished fortios.event.event,fortios.category.system,fortios.severity.information 100010 020212$ Disk scan is needed fortios.event.event,fortios.category.system,fortios.severity.alert 100010 020213$ Log file on disk is corrupted fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020214$ Locally generated traffic goes to IoC location fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020220$ Outbound bandwidth rate exceeded fortios.event.event,fortios.category.system,fortios.severity.information 100010 020221$ Inbound bandwidth rate exceeded fortios.event.event,fortios.category.system,fortios.severity.information 100010 020230$ Write Permission Violation fortios.event.event,fortios.category.system,fortios.severity.alert 100010 020231$ Hard Link Creation Violation fortios.event.event,fortios.category.system,fortios.severity.alert 100010 020232$ Load Kernel/Kernel Module/Firmware Violation fortios.event.event,fortios.category.system,fortios.severity.alert 100010 020233$ Integrity check of Run/loading Excutable File failed without Integrity measure fortios.event.event,fortios.category.system,fortios.severity.alert 100010 020234$ Integrity check of Run/loading Excutable File failed with mismatched measure fortios.event.event,fortios.category.system,fortios.severity.alert 100010 020235$ Filesystem Mount Violation fortios.event.event,fortios.category.system,fortios.severity.alert 100010 020300$ BGP neighbor status changed fortios.event.event,fortios.category.router,fortios.severity.warning 100010 020301$ Routing log information fortios.event.event,fortios.category.router,fortios.severity.information 100010 020302$ OSPF neighbor status changed fortios.event.event,fortios.category.router,fortios.severity.warning 100010 020303$ OSPF6 neighbor status changed fortios.event.event,fortios.category.router,fortios.severity.warning 100010 020304$ Routing log warning fortios.event.event,fortios.category.router,fortios.severity.warning 100010 020305$ Routing log critical event fortios.event.event,fortios.category.router,fortios.severity.critical 100010 020306$ Routing log error fortios.event.event,fortios.category.router,fortios.severity.error 100010 020401$ Router cleared fortios.event.event,fortios.category.router,fortios.severity.notice 100010 022000$ Packet length mismatch fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022001$ Protocol version unsupported fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022002$ Request type not supported fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022003$ Signal handler setup failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022004$ Socket creation failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022005$ Socket creation retry failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022006$ Registration for CMDB events failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022009$ AntiVirus profile not found fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022010$ URL filter packet send failure fortios.event.event,fortios.category.system,fortios.severity.error 100010 022011$ Memory conserve mode entered fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022012$ Memory conserve mode exited fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022013$ IP pool PBA block exhausted fortios.event.event,fortios.category.system,fortios.severity.alert 100010 022014$ IP pool PBA NAT IP exhausted fortios.event.event,fortios.category.system,fortios.severity.alert 100010 022015$ IP pool PBA created fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022016$ Deallocate IP pool PBA fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022017$ Global resource limit exceeded fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022018$ VDOM resource limit exceeded fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022019$ Log rate limit exceeded fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022020$ HA socket creation failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022021$ UDP socket creation to relay URL request failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022031$ Settings modified by Security Fabric service fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022032$ Looped configuration in Security Fabric service fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022035$ Serial number of upstream is changed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022036$ Connection with Security Fabric member established and authorized. fortios.event.event,fortios.category.system,fortios.severity.information 100010 022037$ Connection with authorized Security Fabric member terminated. fortios.event.event,fortios.category.system,fortios.severity.information 100010 022038$ Synchronization of global object failed. fortios.event.event,fortios.category.system,fortios.severity.error 100010 022039$ Synchronization of global object report. fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022040$ Device joined the Security Fabric. fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022041$ Device left the Security Fabric. fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022042$ Device in the Security Fabric was updated. fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022043$ An authorization request was added. fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022044$ An authorization request was updated. fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022045$ An authorization request was removed. fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022046$ Device's authorization privilege changed. fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022047$ CSF daemon files memory usage warning. fortios.event.event,fortios.category.system,fortios.severity.information 100010 022048$ Fabric ADVPN configuration synchronized from root. fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022049$ Daemon csfd has closed. fortios.event.event,fortios.category.system,fortios.severity.debug 100010 022050$ Address allocated by FortiIPAM and applied to an interface fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022051$ Address received from FortiIPAM could not be applied to the interface fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022052$ FortiIPAM indicated that the address was no longer allocated to the interface fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022053$ Startup validation of IPAM addresses was completed fortios.event.event,fortios.category.system,fortios.severity.information 100010 022060$ Address allocated to IPAM interface fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022061$ Address freed by IPAM interface fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022062$ Flag IPAM entry as conflict fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022063$ Unflag IPAM entry as conflict fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022080$ Provisioning of latest firmware was completed fortios.event.event,fortios.category.system,fortios.severity.information 100010 022081$ Provisioning of latest firmware failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022085$ A device upgrade was completed fortios.event.event,fortios.category.system,fortios.severity.information 100010 022086$ A device upgrade failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022090$ A federated upgrade was cancelled due to the CSF tree not being ready fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022091$ A federated upgrade was completed successfully fortios.event.event,fortios.category.system,fortios.severity.information 100010 022092$ A federated upgrade failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022093$ A step in a multi-step federated upgrade was completed fortios.event.event,fortios.category.system,fortios.severity.information 100010 022094$ A federated upgrade was completed by the root FortiGate fortios.event.event,fortios.category.system,fortios.severity.information 100010 022095$ A federated upgrade could not be completed by the root FortiGate fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022100$ Files dropped by quarantine daemon fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022101$ Files dropped due to poor network connection fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022102$ Log disk failure imminent fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022103$ Sandbox limit reached fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022104$ Power supply restored fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022105$ Power supply failed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022106$ Optional power supply not detected fortios.event.event,fortios.category.system,fortios.severity.information 100010 022107$ Voltage anomaly fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022108$ Fan anomaly fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022109$ Temperature too high fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022110$ Spare blocks availability low fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022111$ FPC down due to PSU action fortios.event.event,fortios.category.system,fortios.severity.error 100010 022112$ FPC up due to PSU action fortios.event.event,fortios.category.system,fortios.severity.information 100010 022113$ Authentication error fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022114$ Power supply failed warning fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022115$ Power supply restored notification fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022116$ Power Supply Redundancy Degrade fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022117$ Power Supply Redundancy Lost fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022150$ Voltage normal fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022151$ Fan normal fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022152$ Temperature too low fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022153$ Temperature normal fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022200$ Certificate will be auto-updated fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022201$ Certificate will be auto-regenerated fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022203$ Certificate failed to auto-generate fortios.event.event,fortios.category.system,fortios.severity.error 100010 022204$ Certificate pending to auto-generate fortios.event.event,fortios.category.system,fortios.severity.information 100010 022205$ Certificate succeed to auto-generate fortios.event.event,fortios.category.system,fortios.severity.information 100010 022206$ CRL is expired fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022207$ Certificate will expire soon fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022220$ Threat feed updated fortios.event.event,fortios.category.system,fortios.severity.information 100010 022221$ Threat feed update failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022222$ Threat feed loaded fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022223$ Threat feed debug fortios.event.event,fortios.category.system,fortios.severity.debug 100010 022700$ IPS session scan paused fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022701$ IPS session scan resumed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022800$ Scan services session failed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022802$ File descriptor conserve mode entered fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022803$ File descriptor conserve mode exited fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022804$ License status changed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022805$ License validation failure fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022806$ Duplicate license detected fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022807$ VDOM license status changed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022808$ VM license expired fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022809$ VM license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022810$ Scan error - traffic blocked fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022811$ Scan error - traffic passed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022812$ Scanunit is reloading AV engine fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022813$ Scanunit reloaded AV Database fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022814$ Scanunit AV Database reload error fortios.event.event,fortios.category.system,fortios.severity.error 100010 022815$ Scanunit loaded AV Database fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022816$ Scanunit AV Database load error fortios.event.event,fortios.category.system,fortios.severity.error 100010 022850$ User quarantine MAC added fortios.event.event,fortios.category.switch-controller,fortios.severity.notice 100010 022851$ User quarantine MAC deleted fortios.event.event,fortios.category.switch-controller,fortios.severity.notice 100010 022852$ User quarantine MAC bounce port hit fortios.event.event,fortios.category.switch-controller,fortios.severity.notice 100010 022853$ User quarantine MAC bounce port miss fortios.event.event,fortios.category.switch-controller,fortios.severity.warning 100010 022861$ NAC device addition fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022862$ NAC device deletion fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022863$ NAC device modify fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022864$ DPP device addition fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022865$ DPP device deletion fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022866$ DPP device modify fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022867$ DPP interface tags add fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022868$ DPP interface tags delete fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022869$ NAC device dynamic address addition fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022870$ NAC device dynamic address deletion fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022871$ NAC MAC cache sync fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022872$ NAC device Max Limit Error fortios.event.event,fortios.category.switch-controller,fortios.severity.warning 100010 022873$ DPP device Max Limit Error fortios.event.event,fortios.category.switch-controller,fortios.severity.warning 100010 022890$ Switch-Controller Daemon Log (Notification) fortios.event.event,fortios.category.switch-controller,fortios.severity.notice 100010 022891$ Switch-Controller Switch Sync Error fortios.event.event,fortios.category.switch-controller,fortios.severity.error 100010 022892$ Switch-Controller Switch Sync Complete fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022893$ Switch-Controller Switch Sync State fortios.event.event,fortios.category.switch-controller,fortios.severity.debug 100010 022894$ Switch-Controller Switch Upgrade Error fortios.event.event,fortios.category.switch-controller,fortios.severity.error 100010 022895$ Switch-Controller Switch Upgrade Status fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022896$ Switch-Controller Daemon Log (Critical) fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 022897$ Switch-controller split-port related configuration change detected fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022900$ CAPUTP session status fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022901$ FortiAnalyzer connection up fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022902$ FortiAnalyzer connection down fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022903$ FortiAnalyzer connection failed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022904$ CAPUTP session status notification fortios.event.event,fortios.category.switch-controller,fortios.severity.notice 100010 022912$ FortiGate Cloud server connection failed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022913$ FortiGate Cloud server disconnected fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022915$ FortiGate Cloud server connected fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022916$ FortiGuard Message Service status fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022917$ SMS quota reached fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022918$ FortiGuard Message Service controller status fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022919$ Server logging status changed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022921$ Routing information changed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022922$ Link monitor status fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022923$ SDWAN status fortios.event.event,fortios.category.sdwan,fortios.severity.notice 100010 022924$ SDWAN volume status fortios.event.event,fortios.category.sdwan,fortios.severity.notice 100010 022925$ SDWAN SLA information fortios.event.event,fortios.category.sdwan,fortios.severity.information 100010 022926$ SDWAN Neighbor status fortios.event.event,fortios.category.sdwan,fortios.severity.notice 100010 022927$ SDWAN Neighbor standalone fortios.event.event,fortios.category.sdwan,fortios.severity.notice 100010 022928$ SDWAN Neighbor primary fortios.event.event,fortios.category.sdwan,fortios.severity.notice 100010 022929$ SDWAN Neighbor secondary fortios.event.event,fortios.category.sdwan,fortios.severity.warning 100010 022930$ SDWAN status warning fortios.event.event,fortios.category.sdwan,fortios.severity.warning 100010 022931$ SDWAN SLA information warning fortios.event.event,fortios.category.sdwan,fortios.severity.warning 100010 022932$ Link monitor status warning fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022933$ SDWAN SLA notification fortios.event.event,fortios.category.sdwan,fortios.severity.notice 100010 022934$ SDWAN status information fortios.event.event,fortios.category.sdwan,fortios.severity.information 100010 022935$ SDWAN status debug fortios.event.event,fortios.category.sdwan,fortios.severity.debug 100010 022936$ Virtual WAN Link internet service passive quality information fortios.event.event,fortios.category.sdwan,fortios.severity.information 100010 022949$ FortiGate Cloud auto-join attempted fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022950$ FortiGate Cloud activation successful fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022951$ FortiGate Cloud logout fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022952$ FortiGate Cloud activation failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022954$ Internet Service obsolete fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022955$ Internet Service name update failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022956$ Internet Service name update fortios.event.event,fortios.category.system,fortios.severity.notice 100010 023101$ IPsec VPN tunnel up fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 023102$ IPsec VPN tunnel down fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 023103$ IPsec VPN tunnel statistics fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 026001$ DHCP Ack log fortios.event.event,fortios.category.system,fortios.severity.information 100010 026002$ DHCP Release log fortios.event.event,fortios.category.system,fortios.severity.information 100010 026003$ DHCP statistics fortios.event.event,fortios.category.system,fortios.severity.information 100010 026004$ DHCP client lease granted fortios.event.event,fortios.category.system,fortios.severity.information 100010 026005$ DHCP lease usage high fortios.event.event,fortios.category.system,fortios.severity.warning 100010 026006$ DHCP lease usage full fortios.event.event,fortios.category.system,fortios.severity.warning 100010 026007$ DHCP client blocked log fortios.event.event,fortios.category.system,fortios.severity.information 100010 026008$ DHCP DDNS add query fortios.event.event,fortios.category.system,fortios.severity.information 100010 026009$ DHCP DDNS delete query fortios.event.event,fortios.category.system,fortios.severity.information 100010 026010$ DHCP DDNS query completed fortios.event.event,fortios.category.system,fortios.severity.information 100010 026011$ DHCPv6 Ack log fortios.event.event,fortios.category.system,fortios.severity.information 100010 026012$ DHCPv6 Release log fortios.event.event,fortios.category.system,fortios.severity.information 100010 027001$ VRRP state changed fortios.event.event,fortios.category.router,fortios.severity.information 100010 029001$ PPP status fortios.event.event,fortios.category.system,fortios.severity.information 100010 029002$ PPP authentication successful fortios.event.event,fortios.category.system,fortios.severity.notice 100010 029003$ PPP authentication failed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 029004$ PPP status error message fortios.event.event,fortios.category.system,fortios.severity.error 100010 029005$ PPP status debug message fortios.event.event,fortios.category.system,fortios.severity.debug 100010 029010$ PPPoE status report fortios.event.event,fortios.category.system,fortios.severity.notice 100010 029011$ PPP execution failed fortios.event.event,fortios.category.system,fortios.severity.error 100010 029013$ PPP daemon started fortios.event.event,fortios.category.system,fortios.severity.notice 100010 029014$ PPP daemon exited fortios.event.event,fortios.category.system,fortios.severity.information 100010 029015$ PPP received invalid peer IP fortios.event.event,fortios.category.system,fortios.severity.error 100010 029016$ PPP received invalid local IP fortios.event.event,fortios.category.system,fortios.severity.error 100010 029021$ SNMP query failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 029022$ DDNS update failed fortios.event.event,fortios.category.system,fortios.severity.error 100010 032001$ Admin login successful fortios.event.event,fortios.category.system,fortios.severity.information 100010 032002$ Admin login failed fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032003$ Admin logout successful fortios.event.event,fortios.category.system,fortios.severity.information 100010 032005$ Admin overrode VDOM fortios.event.event,fortios.category.system,fortios.severity.information 100010 032006$ Super admin entered VDOM fortios.event.event,fortios.category.system,fortios.severity.information 100010 032007$ Super admin left VDOM fortios.event.event,fortios.category.system,fortios.severity.information 100010 032008$ Disk log access failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032009$ FortiGate started fortios.event.event,fortios.category.system,fortios.severity.information 100010 032010$ Disk full fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032011$ Disk log rolled fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032014$ Support license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032015$ Log disk full fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032017$ FortiGate Cloud daily quota full fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032018$ FIPS CC entered error mode fortios.event.event,fortios.category.system,fortios.severity.emergency 100010 032019$ CC entered error mode fortios.event.event,fortios.category.system,fortios.severity.emergency 100010 032020$ Message Authentication Code corrupted fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032021$ Admin login disabled fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032022$ VDOM enabled fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032023$ Memory log full over first warning level fortios.event.event,fortios.category.system,fortios.severity.information 100010 032024$ Admin password expired fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032025$ SSH server re-key fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032026$ SSH server received bad length packet fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032027$ Disk logs viewed successfully fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032028$ Disk log directory deleted fortios.event.event,fortios.category.system,fortios.severity.information 100010 032029$ Disk log file deleted fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032030$ FDS statistics sent fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032031$ Memory log access failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032032$ DLP archive full fortios.event.event,fortios.category.system,fortios.severity.emergency 100010 032033$ Quarantine full fortios.event.event,fortios.category.system,fortios.severity.emergency 100010 032034$ Report db data full fortios.event.event,fortios.category.system,fortios.severity.emergency 100010 032035$ VDOM disabled fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032036$ IPS archive full fortios.event.event,fortios.category.system,fortios.severity.emergency 100010 032037$ Disk log full over first warning fortios.event.event,fortios.category.system,fortios.severity.information 100010 032038$ Log rotation requested by FortiCron fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032039$ Memory logs viewed successfully fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032040$ Report deleted fortios.event.event,fortios.category.system,fortios.severity.information 100010 032041$ Report deleted from GUI fortios.event.event,fortios.category.system,fortios.severity.information 100010 032042$ Memory log full over second warning level fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032043$ Memory log full over final warning level fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032044$ Log deleted by user fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032045$ FortiGuard management service license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032048$ One time schedule expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032049$ FortiGate Cloud license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032050$ Policy packet capture full fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032051$ Disk logs upload started fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032052$ Upload and run a script fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032057$ FortiAnalyzer log access failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032058$ FortiAnalyzer logs viewed successfully fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032095$ Admin performed an action from GUI fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032096$ Log file downloaded from GUI fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032097$ Policy packet capture file deleted fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032099$ Configuration changed information fortios.event.event,fortios.category.system,fortios.severity.information 100010 032100$ FortiToken synchronized fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032102$ Configuration changed fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032103$ New firmware available on FortiGuard fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032104$ Configuration changed via GUI fortios.event.event,fortios.category.system,fortios.severity.information 100010 032105$ NTP server status changes to reachable fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032106$ NTP server status changes to resolvable fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032107$ NTP server status changes to unresolvable fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032108$ NTP server status changes to unreachable fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032109$ Updating virus database fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032110$ IPS database updated fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032111$ AV, IPS, GeoIP, SRC-VIS, FortiFlow, URL White-list, Certificate databases updated fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032113$ SRC-VIS object updated fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032114$ GeoIP object updated fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032116$ AV package update by SCP failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032117$ AV package update by SCP successful fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032118$ AV updated by admin fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032119$ AV database updated by scanunit fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032129$ Guest user added fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032130$ User changed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032131$ Guest user deleted fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032132$ Local user added fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032138$ Device rebooted fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032139$ Wake on LAN device fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032140$ Global time setting changed by user fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032141$ Global time setting changed by NTP fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032142$ System configuration backed up fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032143$ System configuration backed up by SCP fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032144$ System configuration backed up error fortios.event.event,fortios.category.system,fortios.severity.error 100010 032145$ System configuration backed up alert fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032146$ Global time setting changed by PTP fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032148$ CRL update requested fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032149$ Command failed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032151$ IPv6 firewall local in policy added fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032152$ IPv6 firewall local in policy setting changed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032153$ IPv6 firewall local in policy deleted fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032155$ FortiToken activation requested fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032156$ FortiToken activation successful fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032157$ FortiToken re-synchronized fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032158$ FortiToken re-synchronization failed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032159$ FortiToken activation failed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032160$ FortiToken mobile push message succeeded fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032161$ FortiToken mobile push message failed fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032168$ VDOM limit reached fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032169$ DLP database space alarm fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032170$ Alarm created fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032171$ Alarm acknowledged fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032172$ IPv4 firewall local in policy added fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032173$ IPv4 firewall local in policy's setting changed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032174$ IPv4 firewall local in policy deleted fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032180$ IP Geography DB initialization failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032190$ Invalid image loaded fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032191$ Image with invalid CC signature loaded fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032192$ Image with invalid RSA signature loaded fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032193$ Image with valid RSA signature loaded fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032194$ System upgrade failed due to file operation failure fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032200$ Device shutdown fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032201$ Image loaded successfully fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032202$ Image restored fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032203$ Configuration restored fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032204$ FortiGuard service restored fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032205$ VM license restored fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032206$ Script restored from management station fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032207$ Configuration list retrieval failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032208$ PKCS12 certificate imported fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032209$ IPS custom signatures restored fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032210$ Firmware image backed up successfully fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032211$ Revision uploaded to flash disk fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032212$ Revision deleted fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032213$ Template restored fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032214$ File restore failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032215$ Image updated fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032217$ IPS package - Admin update successful fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032218$ DLP fingerprint database update via SCP failed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032219$ Error output backup via SCP successful fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032220$ Batch mode command output backup via SCP successful fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032221$ VM license installed via SCP fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032222$ Global setting changed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032223$ IPS custom signatures backup success fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032224$ Disk logs backed up fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032225$ Revision database reset due to data corruption fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032226$ Image failed to load fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032227$ DLP fingerprint database failed to update by SCP fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032228$ Firmware image loaded incorrect fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032229$ Firmware image without valid RSA signature loaded fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032230$ Firmware image with invalid RSA signature loaded fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032231$ FortiGuard service failed to restore fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032232$ VM license failed to restore fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032233$ Firmware image backup failed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032234$ Image with invalid CC signature restored fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032235$ Image restored from FortiGuard Management fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032236$ Memory logs backed up fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032237$ Memory logs failed to back up fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032238$ Disk logs failed to back up fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032239$ Disk logs backed up to USB fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032240$ System operating in USB mode fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032241$ Disk logs failed to back up to USB fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032242$ VM license failed to install via SCP fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032243$ IPS package updated via SCP fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032244$ IPS package failed to update via SCP fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032245$ IPS custom signatures backup failed fortios.event.event,fortios.category.system,fortios.severity.error 100010 032246$ IPS custom signatures restored critical fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032247$ SSH protocol cannot be negotiated fortios.event.event,fortios.category.system,fortios.severity.error 100010 032252$ Factory settings reset fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032253$ RAID disk formatted fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032254$ RAID enabled fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032255$ RAID disabled fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032260$ Image restored from FortiGuard Management notification fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032261$ Script restored by user fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032262$ Image restore confirmed by user fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032263$ Bluetooth firmware check fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032264$ Bluetooth firmware update fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032265$ Bluetooth firmware update fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032270$ SSH host keys regenerated. fortios.event.event,fortios.category.system,fortios.severity.information 100010 032300$ Report image file uploaded fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032301$ VDOM added fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032302$ VDOM deleted fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032545$ Scheduled daily reboot started fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032546$ Application crashed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032547$ Autoscript start fortios.event.event,fortios.category.system,fortios.severity.information 100010 032548$ Autoscript stop fortios.event.event,fortios.category.system,fortios.severity.information 100010 032549$ Autoscript stop automatically fortios.event.event,fortios.category.system,fortios.severity.information 100010 032550$ Autoscript delete result fortios.event.event,fortios.category.system,fortios.severity.information 100010 032551$ Autoscript backup result fortios.event.event,fortios.category.system,fortios.severity.information 100010 032552$ Autoscript check status fortios.event.event,fortios.category.system,fortios.severity.information 100010 032553$ Autoscript stop due to limit reached fortios.event.event,fortios.category.system,fortios.severity.information 100010 032554$ Database updated by admin fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032561$ Admin disconnected fortios.event.event,fortios.category.system,fortios.severity.information 100010 032562$ Store config failed - not enough flash space fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032564$ Configuration failed to restore fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032565$ Configuration restored from management station fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032566$ Configuration restored by SCP fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032568$ Revision Database deletion fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032569$ Switch-Controller fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 032571$ Configuration failed to restore warning fortios.event.event,fortios.category.system,fortios.severity.warning 100010 032601$ Switch-Controller discovered fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032602$ Switch-Controller authorized fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032603$ Switch-Controller deauthorized fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032604$ Switch-Controller deleted fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032605$ Switch-Controller Tunnel Up fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032606$ Switch-Controller Tunnel Down fortios.event.event,fortios.category.switch-controller,fortios.severity.warning 100010 032607$ Image push to FortiSwitch fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032608$ Image stage to FortiSwitch fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032609$ Disable FortiSwitch Discovery fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032610$ Switch-Controller warning fortios.event.event,fortios.category.switch-controller,fortios.severity.warning 100010 032611$ Export port to pool fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032612$ Export port to vdom fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032613$ Request port from pool fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032614$ Return port to pool fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032615$ FortiSwitch MAC add fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032616$ FortiSwitch MAC delete fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032617$ FortiSwitch MAC move fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 032693$ FortiSwitch switch controller fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 032694$ FortiSwitch PoE fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 032695$ FortiSwitch link fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 032696$ FortiSwitch spanning Tree fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 032697$ FortiSwitch switch fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 032698$ FortiSwitch router fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 032699$ FortiSwitch system fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 034415$ NP6 IPsec engine is busy fortios.event.event,fortios.category.system,fortios.severity.information 100010 034416$ NP6 IPsec engine is possibly locked up fortios.event.event,fortios.category.system,fortios.severity.warning 100010 034417$ NP6 IPsec engine is locked up fortios.event.event,fortios.category.system,fortios.severity.critical 100010 034418$ NPU HPE is dropping packets fortios.event.event,fortios.category.system,fortios.severity.warning 100010 034419$ NP6 HPE under a packets flood fortios.event.event,fortios.category.system,fortios.severity.critical 100010 034428$ NPU HPE is dropping packets fortios.event.event,fortios.category.system,fortios.severity.warning 100010 034430$ NPU HPE under packet flood fortios.event.event,fortios.category.system,fortios.severity.critical 100010 035001$ HA secondary synchronized Virus database fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 035002$ HA secondary synchronized Extended database fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 035003$ HA secondary synchronized Extreme database fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 035004$ HA secondary synchronized FLDB fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 035005$ HA secondary synchronized IDS package fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 035007$ HA secondary synchronized AntiVirus package fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 035009$ HA secondary synchronized CID package fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 035011$ HA secondary synchronization failed fortios.event.event,fortios.category.ha,fortios.severity.error 100010 035012$ Secondary sync failed fortios.event.event,fortios.category.ha,fortios.severity.error 100010 035013$ HA failover failed fortios.event.event,fortios.category.ha,fortios.severity.error 100010 035014$ HA reset uptime fortios.event.event,fortios.category.ha,fortios.severity.information 100010 035015$ HA clear history fortios.event.event,fortios.category.ha,fortios.severity.information 100010 035016$ HA failover success fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 036881$ Configuration reverted due to timeout fortios.event.event,fortios.category.system,fortios.severity.notice 100010 036882$ Configuration manually saved fortios.event.event,fortios.category.system,fortios.severity.notice 100010 036883$ Clear active sessions fortios.event.event,fortios.category.system,fortios.severity.warning 100010 037120$ Negotiate IPsec phase 1 fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037121$ Negotiate IPsec phase 1 fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037122$ Negotiate IPsec phase 2 fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037123$ Negotiate IPsec phase 2 fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037124$ IPsec phase 1 error fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037125$ IPsec phase 2 error fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037126$ IPsec no state error fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037127$ Progress IPsec phase 1 fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037128$ Progress IPsec phase 1 fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037129$ Progress IPsec phase 2 fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037130$ Progress IPsec phase 2 fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037131$ IPsec ESP fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037132$ IPsec ESP fortios.event.event,fortios.category.vpn,fortios.severity.critical 100010 037133$ IPsec SA installed fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037134$ IPsec phase 1 SA deleted fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037135$ IPsec phase 2 SA deleted fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037136$ IPsec DPD failed fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037137$ IPsec connection failed fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 037138$ IPsec connection status changed fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037139$ IPsec phase 2 status changed fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037141$ IPsec tunnel statistics fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 037889$ Virtual cluster deleted fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037890$ Virtual cluster VDOM moved fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037891$ Virtual cluster VDOM added fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037892$ Virtual cluster member state moved fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037893$ Virtual cluster member dead fortios.event.event,fortios.category.ha,fortios.severity.critical 100010 037894$ Virtual cluster member joined fortios.event.event,fortios.category.ha,fortios.severity.critical 100010 037895$ Virtual cluster added HA device interface fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037896$ Virtual cluster deleted HA device interface fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037897$ HA device interface ready fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037898$ HA device interface failed fortios.event.event,fortios.category.ha,fortios.severity.warning 100010 037899$ HA device interface peer information fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037900$ Heartbeat device interface deleted fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037901$ Heartbeat device interface down fortios.event.event,fortios.category.ha,fortios.severity.critical 100010 037902$ Heartbeat device interface up fortios.event.event,fortios.category.ha,fortios.severity.information 100010 037903$ Synchronization status with primary fortios.event.event,fortios.category.ha,fortios.severity.information 100010 037904$ Device set as HA primary fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037907$ VLAN heartbeat started fortios.event.event,fortios.category.ha,fortios.severity.information 100010 037908$ VLAN heartbeat lost fortios.event.event,fortios.category.ha,fortios.severity.error 100010 037909$ VLAN heartbeat lost summary fortios.event.event,fortios.category.ha,fortios.severity.error 100010 037910$ Heartbeat packet lost fortios.event.event,fortios.category.ha,fortios.severity.critical 100010 037911$ Device set as HA master information fortios.event.event,fortios.category.ha,fortios.severity.information 100010 037912$ FGSP member joined fortios.event.event,fortios.category.ha,fortios.severity.notice 100010 037913$ FGSP member left fortios.event.event,fortios.category.ha,fortios.severity.critical 100010 038010$ FIPS CC encryption failed fortios.event.event,fortios.category.user,fortios.severity.alert 100010 038011$ FIPS CC decryption failed fortios.event.event,fortios.category.user,fortios.severity.alert 100010 038012$ Seeding from entropy source fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038031$ FSSO logon successful fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038032$ FSSO logout successful fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038033$ FSSO Active Directory server authentication status fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038403$ Insufficient system resource notification fortios.event.event,fortios.category.system,fortios.severity.critical 100010 038404$ FortiGuard hostname unresolvable fortios.event.event,fortios.category.system,fortios.severity.error 100010 038405$ Guest user account login information sent to phone fortios.event.event,fortios.category.system,fortios.severity.notice 100010 038406$ Guest user account login information sent as SMS fortios.event.event,fortios.category.system,fortios.severity.notice 100010 038407$ Guest user account login information sent to email fortios.event.event,fortios.category.system,fortios.severity.notice 100010 038408$ SSL connection established fortios.event.event,fortios.category.system,fortios.severity.information 100010 038409$ SSL connection closed fortios.event.event,fortios.category.system,fortios.severity.information 100010 038410$ SSL connection failed fortios.event.event,fortios.category.system,fortios.severity.information 100010 038411$ Two-factor authentication code sent fortios.event.event,fortios.category.system,fortios.severity.notice 100010 038412$ Token activation code sent fortios.event.event,fortios.category.system,fortios.severity.notice 100010 038656$ RADIUS protocol error summary fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038657$ RADIUS profile not found summary fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038658$ RADIUS profile CTX not found summary fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038659$ RADIUS accounting stop message missing summary fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038660$ RADIUS accounting event summary fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038661$ RADIUS endpoint block event or other event summary fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038662$ RADIUS accounting protocol error fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038663$ RADIUS accounting profile not found fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038665$ RADIUS accounting stop message missing fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038666$ RADIUS accounting event fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038667$ RADIUS other accounting event fortios.event.event,fortios.category.user,fortios.severity.notice 100010 038668$ RADIUS endpoint block event fortios.event.event,fortios.category.user,fortios.severity.notice 100010 039424$ SSL VPN tunnel up fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039425$ SSL VPN tunnel down fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039426$ SSL VPN login fail fortios.event.event,fortios.category.vpn,fortios.severity.alert 100010 039936$ SSL VPN statistics fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039937$ SSL VPN deny fortios.event.event,fortios.category.vpn,fortios.severity.warning 100010 039938$ SSL VPN pass fortios.event.event,fortios.category.vpn,fortios.severity.warning 100010 039939$ SSL VPN timeout fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039940$ SSL VPN close fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039941$ SSL VPN system busy fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039942$ SSL VPN certificate OK fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039943$ SSL VPN new connection fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039944$ SSL VPN alert fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 039945$ SSL VPN exit fail fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 039946$ SSL VPN exit error fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 039947$ SSL VPN tunnel up fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039948$ SSL VPN tunnel down fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039949$ SSL VPN statistics fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039950$ SSL VPN unknown tag fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039951$ SSL VPN tunnel error fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 039952$ SSL VPN enter conserve mode fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 039953$ SSL VPN leave conserve mode fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040001$ PPTP tunnel up fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040002$ PPTP tunnel down fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040003$ PPTP tunnel status fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040014$ PPTP client connection limit reached fortios.event.event,fortios.category.vpn,fortios.severity.warning 100010 040017$ L2TP client connection failed fortios.event.event,fortios.category.vpn,fortios.severity.warning 100010 040019$ L2TP client disconnected fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040021$ PPTP not configured in VDOM fortios.event.event,fortios.category.vpn,fortios.severity.debug 100010 040022$ PPTP IP addresses unavailable fortios.event.event,fortios.category.vpn,fortios.severity.warning 100010 040024$ PPTP config list insufficient memory fortios.event.event,fortios.category.vpn,fortios.severity.warning 100010 040034$ PPTP daemon started fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 040035$ PPTP daemon failed to start fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 040036$ PPTP daemon exited fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 040037$ PPTP daemon disconnected fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040038$ PPTP client connected fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040039$ PPTP client disconnected fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040101$ L2TP tunnel up fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040102$ L2TP tunnel down fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040103$ L2TP tunnel status fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040114$ L2TP daemon started fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 040115$ L2TP daemon exited fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 040118$ L2TP client connected fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 040704$ System performance statistics fortios.event.event,fortios.category.system,fortios.severity.notice 100010 040705$ CPU usage statistics fortios.event.event,fortios.category.system,fortios.severity.notice 100010 040706$ Delete broken symbolic link fortios.event.event,fortios.category.system,fortios.severity.notice 100010 040707$ CPU single core usage statistics fortios.event.event,fortios.category.system,fortios.severity.notice 100010 040960$ Web proxy forward server error fortios.event.event,fortios.category.wad,fortios.severity.notice 100010 041000$ FortiGate update succeeded fortios.event.event,fortios.category.system,fortios.severity.notice 100010 041001$ FortiGate update failed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 041002$ Source visibility signature package updated fortios.event.event,fortios.category.system,fortios.severity.notice 100010 041006$ FortiSandbox AV database updated fortios.event.event,fortios.category.system,fortios.severity.notice 100010 041007$ FortiGate Manual License update fortios.event.event,fortios.category.system,fortios.severity.notice 100010 041008$ FortiGate Manual License is invalid fortios.event.event,fortios.category.system,fortios.severity.warning 100010 041009$ FortiGate database signature invalid fortios.event.event,fortios.category.system,fortios.severity.critical 100010 041011$ FortiGate database without signature installed fortios.event.event,fortios.category.system,fortios.severity.warning 100010 041984$ Certificate loaded fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 041985$ Certificate removed fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 041986$ Certificate regenerated fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 041987$ Certificate updated fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 041988$ SSL setting changed fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 041989$ Certificate error fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 041990$ Certificate update failed fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 041991$ Certificate exported fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 041992$ CRL certificate file is expired fortios.event.event,fortios.category.vpn,fortios.severity.information 100010 042201$ VMX instance successfully attached fortios.event.event,fortios.category.system,fortios.severity.notice 100010 042202$ VMX instance successfully detached fortios.event.event,fortios.category.system,fortios.severity.notice 100010 042203$ VMX instance successfully denied fortios.event.event,fortios.category.system,fortios.severity.notice 100010 043008$ Authentication success fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043009$ Authentication failed fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043010$ Authentication lockout fortios.event.event,fortios.category.user,fortios.severity.warning 100010 043011$ Authentication timed out fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043014$ FSSO logon authentication status fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043015$ FSSO log off authentication status fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043016$ NTLM authentication successful fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043017$ NTLM authentication failed fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043018$ FortiGuard override failed fortios.event.event,fortios.category.user,fortios.severity.warning 100010 043020$ FortiGuard override successful fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043025$ Explicit proxy authentication successful fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043026$ Explicit proxy authentication failed fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043027$ Explicit proxy authentication timed out fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043028$ Explicit proxy user group query failed fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043029$ FortiGuard authentication override successful fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043030$ FortiGuard authentication override failed fortios.event.event,fortios.category.user,fortios.severity.warning 100010 043032$ Explicit proxy authentication user limit reached fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043033$ Explicit proxy authentication user concurrent check failed fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043034$ Explicit proxy authentication no response fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043037$ Authentication IPv4 logon flush fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043038$ Authentication IPv6 logon flush fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043039$ Authentication logon fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043040$ Authentication logout fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043041$ Disclaimer accepted fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043042$ Disclaimer declined fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043043$ Email collecting succeeded fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043044$ Email collecting failed fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043045$ 802.1x authentication succeeded fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043046$ 802.1x authentication failed fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043050$ FSSO server connected fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043051$ FSSO server disconnected fortios.event.event,fortios.category.user,fortios.severity.notice 100010 043520$ Wireless system activity fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043521$ Rogue AP activity fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043522$ Physical AP activity fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043524$ Wireless client activity fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043525$ Rogue AP on wire fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043526$ Physical AP radio activity fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043527$ Rogue AP status configured fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043528$ Physical AP radio error activity fortios.event.event,fortios.category.wireless,fortios.severity.error 100010 043529$ Wireless client load balancing fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043530$ Wireless bridge intrusion detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043531$ Wireless broadcasting deauthentication detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043532$ Wireless null SSID probe response detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043533$ Wireless invalid MAC OUI detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043534$ Wireless long duration attack detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043535$ Wireless Weak WEP IV detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043542$ Wireless EAPOL packet flooding detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043544$ Wireless management flooding detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043546$ Wireless spoofed deauthentication detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043548$ Wireless Asleap attack detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043550$ Wireless station presence detection fortios.event.event,fortios.category.wireless,fortios.severity.information 100010 043551$ Physical AP join fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043552$ Physical AP leave fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043553$ Physical AP fail fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043554$ Physical AP update fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043555$ Physical AP reset fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043556$ Physical AP kick fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043557$ Physical AP add failure fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043558$ Physical AP config error fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043559$ Physical AP SN mismatch fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043560$ Wireless system restarted fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043561$ Wireless system hostapd up fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043562$ Wireless system hostapd down fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043563$ Rogue AP detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043564$ Rogue AP off air fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043565$ Rogue AP on air fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043566$ Rogue AP off wire fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043567$ Fake AP detected fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043568$ Fake AP on air fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043569$ Rogue AP suppressed fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043570$ Rogue AP unsuppressed fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043571$ Rogue AP change detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043572$ Wireless client associated fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043573$ Wireless client authenticated fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043574$ Wireless client disassociated fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043575$ Wireless client deauthenticated fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043576$ Wireless client idle fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043577$ Wireless client denied fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043578$ Wireless client kicked fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043579$ Wireless client IP assigned fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043580$ Wireless client left WTP fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043581$ Wireless client WTP disconnected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043582$ Rogue AP status configured as unclassified fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043583$ Rogue AP status configured as accepted fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043584$ Rogue AP status configured as rogue fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043585$ Rogue AP status configured as suppressed fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043586$ Physical AP radio DARRP channel change fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043587$ Physical AP radio DARRP start fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043588$ Physical AP radio operation channel change fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043589$ Physical AP radio radar detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043590$ Physical AP radio channel removed from NOL fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043591$ Physical AP radio country config success fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043592$ Physical AP radio operation country fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043593$ Physical AP radio config TX power fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043594$ Physical AP radio operation TX power fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043595$ Wireless client load balancing denied fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043596$ Wireless client load balancing retry fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043597$ Physical AP add fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043598$ Physical AP add XSS fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043599$ Physical AP delete fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043600$ Physical AP radio DARRP stop fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043601$ Wireless station sign on fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043602$ Wireless station sign on success fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043603$ Wireless station sign on failed fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043604$ Captive-portal VAP e-mail collect request sent fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043605$ Captive-portal VAP e-mail collect success fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043606$ Captive-portal VAP e-mail collect failed fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043607$ Captive-portal VAP disclaimer agreed fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043608$ Captive-portal VAP disclaimer declined fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043609$ DARRP optimization start fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043610$ DARRP optimization stop fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043611$ Wireless controller start fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043612$ Wireless controller configuration loaded fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043613$ Physical AP error fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043614$ DHCP Starvation detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043615$ Wireless controller IPsec setup failed fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043616$ Physical AP radio NOL added fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043618$ Physical AP image receive success fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043619$ Offending AP detected fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043620$ Offending AP on air fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043621$ Wireless wtp data channel changed fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043622$ WTP is probing vlan fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043623$ VLAN not detected fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043624$ VLAN detected fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043625$ Wireless station CMCC sign on success fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043626$ Wireless station CMCC sign on failed fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043627$ Wireless station CMCC sign on timeout fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043628$ Wireless station CMCC MAC auth success fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043629$ Wireless client RADIUS authentication failure fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043630$ Wireless client RADIUS authentication success fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043631$ Wireless client RADIUS authentication server not responding fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043632$ Wireless client RADIUS MAC authentication failure fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043633$ Wireless client RADIUS MAC authentication success fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043634$ Wireless client RADIUS MAC authentication server not responding fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043635$ Wireless client authenticates through OKC failed with no match fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043636$ Wireless client authenticates through local OKC success fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043637$ Wireless client authenticates through inter AC OKC success fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043638$ Wireless client authenticates through inter AP OKC success fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043639$ Wireless client sent invalid FT action request fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043640$ Wireless client sent invalid FT auth request fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043641$ Wireless client sent invalid FT reassociation request fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043642$ Wireless client sent FT action reqeust fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043643$ FT action response was sent to wireless client fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043644$ Wireless client sent FT auth request fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043645$ FT auth response was sent to wireless client fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043646$ Wireless client sent FT reassociation request fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043647$ FT reassociation response was sent to wireless client fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043648$ Wireless client 4 way handshake failed with invalid 2/4 message fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043649$ Wireless client 4 way handshake failed with invalid 4/4 message fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043650$ AP sent 1/4 message of 4 way handshake to wireless client fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043651$ Wireless client sent 2/4 message of 4 way handshake fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043652$ AP sent 3/4 message of 4 way handshake to wireless client fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043653$ Wireless client sent 4/4 message of 4 way handshake fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043654$ AP sent 1/2 message of group key handshake to wireless client fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043655$ Wireless client sent 2/2 message of group key handshake fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043656$ Max sta count limit for the PSK was reached fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043657$ Wireless station association failed fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043658$ Wireless station DHCP process failed with no server response fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043659$ Another DHCP server sent DHCP offer to wireless station fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043660$ No DHCP ACK from server fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043661$ DHCP server sent DHCP NAK fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043662$ IP offered has been used by another wireless station fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043663$ Wireless station sent DHCP DISCOVER fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043664$ DHCP server sent DHCP OFFER fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043665$ Wireless station sent DHCP DECLINE fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043666$ Wireless station sent DHCP REQUEST fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043667$ DHCP server sent DHCP ACK fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043668$ Wireless station sent DHCP RELEASE fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043669$ Wireless station sent DHCP INFORM fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043670$ Wireless station is using self-assigned IP fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043671$ Wireless station DNS process failed with no server response fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043672$ Wireless station DNS process failed due to server failure fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043673$ Wireless station DNS process failed due to non-existing domain fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043674$ Wireless station WPA key reinstallation attack on FT reassociation fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043675$ Authentication request from wireless station fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043676$ Authentication response to wireless station fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043677$ Association request from wireless station fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043678$ Reassociation request from wireless station fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043679$ Association response to wireless station fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043680$ Reassociation response to wireless station fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043681$ Probe request from wireless station fortios.event.event,fortios.category.wireless,fortios.severity.information 100010 043682$ Probe response to wireless station fortios.event.event,fortios.category.wireless,fortios.severity.information 100010 043683$ Wireless ble dev detection fortios.event.event,fortios.category.wireless,fortios.severity.information 100010 043684$ Wireless addrgrp duplicate mac fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043685$ Wireless addrgrp address apply fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043686$ PSK is out of any valid schedules fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043687$ Traffic stats for station with bridge wlan fortios.event.event,fortios.category.wireless,fortios.severity.information 100010 043688$ FortiAP receives the apcfg fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043689$ FortiAP is validating the apcfg fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043690$ FortiAP applies the apcfg fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043691$ FortiAP rejects the apcfg fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043692$ Defect antenna detection fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043693$ AP sent WNM action BSTM request fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043694$ Wireless client sent WNM action BSTM response accept fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043695$ Wireless client sent WNM action BSTM response reject fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043696$ Physical AP radio DRMA start fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043697$ Physical AP radio DRMA stop fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043698$ Physical AP radio DRMA mode fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043699$ Wireless station sent DHCP6 SOLICIT fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043700$ DHCP6 server sent DHCP6 ADVERTISE fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043701$ Wireless station sent DHCP6 REQUEST fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043702$ Wireless station sent DHCP6 CONFIRM fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043703$ Wireless station sent DHCP6 RENEW fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043704$ DHCP6 server sent DHCP6 REPLY fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043705$ Wireless station sent DHCP6 RELEASE fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043706$ DHCP6 server sent DHCP6 RECONFIGURE fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043707$ Physical AP radio ssid up fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043708$ Physical AP radio ssid down fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043709$ Wireless client denied by DHCP enforcement for using static IP address fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043710$ SAM iperf test result fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043711$ SAM ping test result fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043712$ AP as station failed in SAM authentication fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043713$ AP as station failed in SAM CWP authentication fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043714$ AP received partial login password fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043715$ AP radio BSS color collision detected. fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043716$ Wireless addrgrp reached firewal address maximum number fortios.event.event,fortios.category.wireless,fortios.severity.warning 100010 043717$ Wireless client layer3 roaming rehome fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043719$ Probe request from wireless station failed due to low rssi fortios.event.event,fortios.category.wireless,fortios.severity.notice 100010 043776$ NAC quarantine fortios.event.event,fortios.category.system,fortios.severity.notice 100010 043777$ NAC anomaly quarantine fortios.event.event,fortios.category.system,fortios.severity.notice 100010 043800$ Blade ready to process traffic fortios.event.event,fortios.category.system,fortios.severity.critical 100010 043801$ Blade not ready to process traffic fortios.event.event,fortios.category.system,fortios.severity.critical 100010 043802$ Primary blade found fortios.event.event,fortios.category.system,fortios.severity.critical 100010 043803$ Primary blade lost fortios.event.event,fortios.category.system,fortios.severity.critical 100010 043804$ Primary blade changed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 043805$ ELBC channel active fortios.event.event,fortios.category.system,fortios.severity.critical 100010 043806$ ELBC channel inactive fortios.event.event,fortios.category.system,fortios.severity.critical 100010 043807$ ELBC channel failover fortios.event.event,fortios.category.system,fortios.severity.critical 100010 043808$ ELBC chassis active fortios.event.event,fortios.category.system,fortios.severity.critical 100010 043809$ ELBC chassis inactive fortios.event.event,fortios.category.system,fortios.severity.critical 100010 044544$ Path configured fortios.event.event,fortios.category.system,fortios.severity.information 100010 044545$ Object configured fortios.event.event,fortios.category.system,fortios.severity.information 100010 044546$ Attribute configured fortios.event.event,fortios.category.system,fortios.severity.information 100010 044547$ Object attribute configured fortios.event.event,fortios.category.system,fortios.severity.information 100010 044548$ Action performed fortios.event.event,fortios.category.system,fortios.severity.information 100010 044555$ CMDB lock deadlock is detected. fortios.event.event,fortios.category.system,fortios.severity.critical 100010 045057$ FortiClient connection added fortios.event.event,fortios.category.endpoint,fortios.severity.information 100010 045058$ FortiClient connection closed fortios.event.event,fortios.category.endpoint,fortios.severity.information 100010 045061$ FortiClient connection closed by type fortios.event.event,fortios.category.endpoint,fortios.severity.information 100010 045071$ FortiClient Vulnerability Scan fortios.event.event,fortios.category.endpoint,fortios.severity.notice 100010 045114$ FortiClient endpoint quarantined fortios.event.event,fortios.category.endpoint,fortios.severity.notice 100010 045115$ FortiClient endpoint quarantine removed fortios.event.event,fortios.category.endpoint,fortios.severity.notice 100010 045121$ EMS WebSocket notification fortios.event.event,fortios.category.endpoint,fortios.severity.notice 100010 045122$ EMS REST API error fortios.event.event,fortios.category.endpoint,fortios.severity.warning 100010 045123$ EMS WebSocket connection error fortios.event.event,fortios.category.endpoint,fortios.severity.warning 100010 045124$ FortiClient VPN connected fortios.event.event,fortios.category.endpoint,fortios.severity.warning 100010 045125$ FortiClient VPN disconnected fortios.event.event,fortios.category.endpoint,fortios.severity.warning 100010 045126$ EMS Cloud entitlement lost and connection dropped fortios.event.event,fortios.category.endpoint,fortios.severity.warning 100010 045128$ EMS REST API recovered from an error fortios.event.event,fortios.category.endpoint,fortios.severity.information 100010 045129$ FCEMS entry has been verified fortios.event.event,fortios.category.endpoint,fortios.severity.information 100010 045130$ FCEMS entry has failed to be verified fortios.event.event,fortios.category.endpoint,fortios.severity.warning 100010 045131$ FCEMS entry has been unverified fortios.event.event,fortios.category.endpoint,fortios.severity.information 100010 046000$ VIP real server enabled fortios.event.event,fortios.category.system,fortios.severity.notice 100010 046001$ VIP real server disabled fortios.event.event,fortios.category.system,fortios.severity.alert 100010 046002$ VIP real server up fortios.event.event,fortios.category.system,fortios.severity.notice 100010 046003$ VIP real server down fortios.event.event,fortios.category.system,fortios.severity.alert 100010 046004$ VIP real server entered hold-down fortios.event.event,fortios.category.system,fortios.severity.notice 100010 046005$ VIP real server health check failed during hold-down fortios.event.event,fortios.category.system,fortios.severity.alert 100010 046006$ VIP real server health check failed fortios.event.event,fortios.category.system,fortios.severity.debug 100010 046400$ FortiExtender system activity fortios.event.event,fortios.category.fortiextender,fortios.severity.notice 100010 046401$ FortiExtender controller activity fortios.event.event,fortios.category.fortiextender,fortios.severity.notice 100010 046402$ FortiExtender controller activity error fortios.event.event,fortios.category.fortiextender,fortios.severity.error 100010 046403$ Remote FortiExtender emergency activity fortios.event.event,fortios.category.fortiextender,fortios.severity.emergency 100010 046404$ Remote FortiExtender alert activity fortios.event.event,fortios.category.fortiextender,fortios.severity.alert 100010 046405$ Remote FortiExtender critical activity fortios.event.event,fortios.category.fortiextender,fortios.severity.critical 100010 046406$ Remote FortiExtender error activity fortios.event.event,fortios.category.fortiextender,fortios.severity.error 100010 046407$ Remote FortiExtender warning activity fortios.event.event,fortios.category.fortiextender,fortios.severity.warning 100010 046408$ Remote FortiExtender notify activity fortios.event.event,fortios.category.fortiextender,fortios.severity.notice 100010 046409$ Remote FortiExtender info activity fortios.event.event,fortios.category.fortiextender,fortios.severity.information 100010 046410$ Remote FortiExtender debug activity fortios.event.event,fortios.category.fortiextender,fortios.severity.debug 100010 046501$ LTE modem detection fortios.event.event,fortios.category.system,fortios.severity.information 100010 046502$ LTE modem GPS daemon started or stopped fortios.event.event,fortios.category.system,fortios.severity.information 100010 046503$ LTE modem GPS location acquisition fortios.event.event,fortios.category.system,fortios.severity.information 100010 046504$ LTE modem billing daemon started or stopped fortios.event.event,fortios.category.system,fortios.severity.information 100010 046505$ LTE billing data purged fortios.event.event,fortios.category.system,fortios.severity.information 100010 046506$ LTE billing daily usage information fortios.event.event,fortios.category.system,fortios.severity.information 100010 046507$ LTE modem firmware upgrade event fortios.event.event,fortios.category.system,fortios.severity.information 100010 046508$ LTE modem QDL device detection event fortios.event.event,fortios.category.system,fortios.severity.information 100010 046509$ LTE modem reboot event fortios.event.event,fortios.category.system,fortios.severity.information 100010 046510$ LTE modem operation mode fortios.event.event,fortios.category.system,fortios.severity.information 100010 046511$ LTE modem powered on or powered off fortios.event.event,fortios.category.system,fortios.severity.information 100010 046512$ LTE modem sim card state event fortios.event.event,fortios.category.system,fortios.severity.information 100010 046513$ LTE modem data link connection event fortios.event.event,fortios.category.system,fortios.severity.information 100010 046514$ LTE modem manual handover event fortios.event.event,fortios.category.system,fortios.severity.information 100010 046515$ LTE modem ip address event fortios.event.event,fortios.category.system,fortios.severity.information 100010 046516$ LTE modem bearer event fortios.event.event,fortios.category.system,fortios.severity.information 100010 046517$ LTE unlock SIM PIM failed. fortios.event.event,fortios.category.system,fortios.severity.warning 100010 046600$ Automation stitch triggered fortios.event.event,fortios.category.system,fortios.severity.notice 100010 046900$ PoE device status reported fortios.event.event,fortios.category.system,fortios.severity.error 100010 047000$ External blocklist list is truncated fortios.event.event,fortios.category.system,fortios.severity.warning 100010 047001$ External blocklist list is no longer truncated fortios.event.event,fortios.category.system,fortios.severity.notice 100010 047002$ EMS file-hash list is truncated fortios.event.event,fortios.category.system,fortios.severity.warning 100010 047003$ EMS file-hash list is no longer truncated fortios.event.event,fortios.category.system,fortios.severity.notice 100010 047004$ EMS file-hash list loaded fortios.event.event,fortios.category.system,fortios.severity.notice 100010 047203$ Bypass ports pair entered bypass mode fortios.event.event,fortios.category.system,fortios.severity.warning 100010 047204$ Bypass ports pair exited bypass mode fortios.event.event,fortios.category.system,fortios.severity.warning 100010 047301$ REST API request success fortios.event.event,fortios.category.rest-api,fortios.severity.information 100010 047302$ REST API request failed fortios.event.event,fortios.category.rest-api,fortios.severity.error 100010 048040$ WANOPT Tunnel successfully created fortios.event.event,fortios.category.wad,fortios.severity.information 100010 048041$ WANOPT Tunnel closed fortios.event.event,fortios.category.wad,fortios.severity.information 100010 048101$ WAN Optimization peer PSK authentication failed fortios.event.event,fortios.category.wad,fortios.severity.error 100010 048102$ WAN Optimization peer authentication failed fortios.event.event,fortios.category.wad,fortios.severity.error 100010 048301$ Unexpected application type for WAN Optimization fortios.event.event,fortios.category.wad,fortios.severity.critical 100010 049002$ VNP Primary restarted fortios.event.event,fortios.category.system,fortios.severity.information 100010 049004$ Hyper-V SR-IOV VF secondary is hot plugged fortios.event.event,fortios.category.system,fortios.severity.information 100010 049005$ Hyper-V SR-IOV VF secondary is hot unplugged fortios.event.event,fortios.category.system,fortios.severity.information 100010 051000$ Neighbor table changed fortios.event.event,fortios.category.router,fortios.severity.information 100010 052000$ Security Rating summary fortios.event.event,fortios.category.security-rating,fortios.severity.notice 100010 052001$ Security Rating result change fortios.event.event,fortios.category.security-rating,fortios.severity.notice 100010 053000$ Connected to SDN server fortios.event.event,fortios.category.system,fortios.severity.information 100010 053001$ Disconnected from SDN server fortios.event.event,fortios.category.system,fortios.severity.information 100010 053002$ Dynamic SDN address channel opened fortios.event.event,fortios.category.system,fortios.severity.information 100010 053003$ Dynamic SDN address channel closed fortios.event.event,fortios.category.system,fortios.severity.information 100010 053100$ Overlay Controller VPN registered fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 053101$ Overlay Controller VPN unregistered fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 053102$ Overlay Controller VPN server communication established fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 053103$ Overlay Controller VPN server communication error fortios.event.event,fortios.category.vpn,fortios.severity.error 100010 053104$ Overlay Controller VPN DNS error fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 053105$ Overlay Controller VPN routing error fortios.event.event,fortios.category.vpn,fortios.severity.notice 100010 053200$ Dynamic address added fortios.event.event,fortios.category.connector,fortios.severity.information 100010 053201$ Dynamic address removed fortios.event.event,fortios.category.connector,fortios.severity.information 100010 053202$ SDN Connector API failed fortios.event.event,fortios.category.connector,fortios.severity.error 100010 053203$ Dynamic address updated. fortios.event.event,fortios.category.connector,fortios.severity.information 100010 053204$ Dynamic address can't be added fortios.event.event,fortios.category.connector,fortios.severity.warning 100010 053205$ Dynamic address can't be removed fortios.event.event,fortios.category.connector,fortios.severity.warning 100010 053300$ VNE provision server update completed fortios.event.event,fortios.category.system,fortios.severity.information 100010 053301$ VNE provision server update failed fortios.event.event,fortios.category.system,fortios.severity.information 100010 053311$ Resource per mapping allocation fortios.event.event,fortios.category.system,fortios.severity.notice 100010 053312$ NPD INFO fortios.event.event,fortios.category.system,fortios.severity.notice 100010 053313$ NPD WARNING MSG fortios.event.event,fortios.category.system,fortios.severity.warning 100010 053314$ NPD ERROR MSG fortios.event.event,fortios.category.system,fortios.severity.error 100010 053315$ LPM ERROR MSG fortios.event.event,fortios.category.system,fortios.severity.error 100010 053316$ LPM INFO MSG fortios.event.event,fortios.category.system,fortios.severity.notice 100010 053400$ Central Management connectivity is active fortios.event.event,fortios.category.system,fortios.severity.notice 100010 053401$ Central Management connectivity is inactive fortios.event.event,fortios.category.system,fortios.severity.warning 100010 053405$ DP channel RX drop detected. fortios.event.event,fortios.category.system,fortios.severity.warning 100010 053406$ Security Fabric settings changed during upgrade fortios.event.event,fortios.category.system,fortios.severity.information 100010 063002$ Unable to connect to the CIFS Domain Controller fortios.event.event,fortios.category.cifs-auth-fail,fortios.severity.warning 100010 063003$ Unable to authenticate with the CIFS Domain Controller fortios.event.event,fortios.category.cifs-auth-fail,fortios.severity.warning 100010 063004$ An error occurred in processing CIFS authentication fortios.event.event,fortios.category.cifs-auth-fail,fortios.severity.warning 100010 063005$ An error occurred in processing CIFS authentication. fortios.event.event,fortios.category.cifs-auth-fail,fortios.severity.warning 100010 064000$ File was blocked by file filter fortios.event.file-filter,fortios.category.file-filter,fortios.severity.warning 100010 064001$ File was detected by file filter fortios.event.file-filter,fortios.category.file-filter,fortios.severity.notice 100010 056001$ LOG_ID_FSW_FLOW fortios.event.forti-switch,fortios.category.fsw-flow,fortios.severity.information 100010 041216$ GTP forward fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041217$ GTP deny fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041218$ GTP rate limit fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041219$ GTP state invalid fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041220$ Tunnel limit GTP message. These messages occur only when the maximum number of GTP fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041221$ Statistic summary information when the GTP tunnel is being torn down fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041222$ GTP user data fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041223$ GTPv2 forward message fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041224$ GTPv2 deny message fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041225$ GTPv2 rate limit message fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041226$ GTPv2 state invalid message fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041227$ Tunnel limit GTP (version 2) message fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041228$ Statistic summary information when the GTPv2 tunnel is being torn down fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041229$ GTPU forward message fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041230$ GTPU deny message fortios.event.gtp,fortios.category.gtp-all,fortios.severity.information 100010 041231$ PFCP forward message fortios.event.gtp,fortios.category.pfcp-all,fortios.severity.information 100010 041232$ PFCP deny message fortios.event.gtp,fortios.category.pfcp-all,fortios.severity.information 100010 041233$ Statistic summary information when the PFCP session is being torn down fortios.event.gtp,fortios.category.pfcp-all,fortios.severity.information 100010 060000$ Traffic blocked as it cannot be forwarded to ICAP Server. fortios.event.icap,fortios.category.icap,fortios.severity.warning 100010 060001$ Traffic blocked as ICAP server found infection. fortios.event.icap,fortios.category.icap,fortios.severity.warning 100010 060002$ Traffic dropped as ICAP server connection is closed. fortios.event.icap,fortios.category.icap,fortios.severity.warning 100010 016384$ Attack detected by UDP/TCP signature fortios.event.ips,fortios.category.signature,fortios.severity.alert 100010 016385$ Attack detected by ICMP signature fortios.event.ips,fortios.category.signature,fortios.severity.alert 100010 016386$ Attack detected by other signature fortios.event.ips,fortios.category.signature,fortios.severity.alert 100010 016399$ Attack detected by a malicious URL fortios.event.ips,fortios.category.malicious-url,fortios.severity.warning 100010 016400$ Botnet C&C Communication (warning) fortios.event.ips,fortios.category.botnet,fortios.severity.warning 100010 016401$ Botnet C&C Communication (notice) fortios.event.ips,fortios.category.botnet,fortios.severity.notice 100010 061000$ SSH shell command is blocked fortios.event.ssh,fortios.category.ssh-command,fortios.severity.warning 100010 061001$ SSH shell command is blocked fortios.event.ssh,fortios.category.ssh-command,fortios.severity.alert 100010 061002$ SSH shell command is detected fortios.event.ssh,fortios.category.ssh-command,fortios.severity.notice 100010 061003$ SSH shell command is detected fortios.event.ssh,fortios.category.ssh-command,fortios.severity.alert 100010 061010$ SSH channel is blocked fortios.event.ssh,fortios.category.ssh-channel,fortios.severity.warning 100010 061011$ SSH channel is detected fortios.event.ssh,fortios.category.ssh-channel,fortios.severity.notice 100010 061012$ SSH connection is blocked, because host-key is not trust fortios.event.ssh,fortios.category.ssh-hostkey,fortios.severity.warning 100010 061013$ SSH host-key is not trust fortios.event.ssh,fortios.category.ssh-hostkey,fortios.severity.notice 100010 062004$ SSL connection is exempted based on address fortios.event.ssl,fortios.category.ssl-exempt,fortios.severity.notice 100010 062006$ SSL connection is exempted based on allowlist fortios.event.ssl,fortios.category.ssl-exempt,fortios.severity.notice 100010 062007$ SSL connection is exempted based on FortiGuard category rating fortios.event.ssl,fortios.category.ssl-exempt,fortios.severity.notice 100010 062008$ SSL connection is exempted based on local category rating fortios.event.ssl,fortios.category.ssl-exempt,fortios.severity.notice 100010 062009$ SSL connection is exempted based on user category rating fortios.event.ssl,fortios.category.ssl-exempt,fortios.severity.notice 100010 062100$ Continue inspect the SSL connection fortios.event.ssl,fortios.category.ssl-negotiation,fortios.severity.notice 100010 062101$ SSL connection is blocked due to its SSL negotiation fortios.event.ssl,fortios.category.ssl-negotiation,fortios.severity.warning 100010 062102$ SSL connection is bypassed due to its SSL negotiation fortios.event.ssl,fortios.category.ssl-negotiation,fortios.severity.notice 100010 062103$ SSL connection information fortios.event.ssl,fortios.category.ssl-negotiation,fortios.severity.information 100010 062200$ SSL server certificate information fortios.event.ssl,fortios.category.ssl-server-cert-info,fortios.severity.information 100010 062220$ SSL handshake information fortios.event.ssl,fortios.category.ssl-handshake,fortios.severity.information 100010 062300$ SSL connection is blocked due to the server certificate is blocklisted fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.warning 100010 062301$ Server certificate has security problem fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.notice 100010 062302$ Re-signed server certificate as untrusted due to security problem fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.notice 100010 062303$ SSL connection is blocked due to server certificate security problem fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.warning 100010 062304$ SSL connection is blocked due to server certificate and SNI mismatched fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.warning 100010 062305$ SSL connection is blocked due to unable to retrieve server's certificate fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.warning 100010 062306$ SSL connection is bypassed due to unable to retrieve server's certificate fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.notice 100010 062307$ Server certificate and SNI mismatched fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.information 100010 000002$ Allowed traffic fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000003$ Traffic violation fortios.event.traffic,fortios.category.forward,fortios.severity.warning 100010 000004$ Traffic other session start fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000005$ Traffic allowed ICMP fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000006$ Traffic denied ICMP fortios.event.traffic,fortios.category.forward,fortios.severity.warning 100010 000007$ Traffic other invalid fortios.event.traffic,fortios.category.forward,fortios.severity.warning 100010 000008$ WAN optimization traffic fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000009$ Web cache traffic fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000010$ Explicit proxy traffic fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000011$ Failed connection attempts fortios.event.traffic,fortios.category.forward,fortios.severity.warning 100010 000012$ Multicast traffic fortios.event.traffic,fortios.category.multicast,fortios.severity.notice 100010 000013$ Forward traffic fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000014$ Local traffic fortios.event.traffic,fortios.category.local,fortios.severity.notice 100010 000015$ Forward traffic session start fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000016$ Local traffic session start fortios.event.traffic,fortios.category.local,fortios.severity.notice 100010 000017$ Sniffer traffic fortios.event.traffic,fortios.category.sniffer,fortios.severity.notice 100010 000019$ Broadcast traffic fortios.event.traffic,fortios.category.multicast,fortios.severity.notice 100010 000020$ Forward traffic statistics fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000021$ Sniffer traffic statistics fortios.event.traffic,fortios.category.sniffer,fortios.severity.notice 100010 000022$ Forward traffic for UTM correlation fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 000024$ ZTNA traffic fortios.event.traffic,fortios.category.ztna,fortios.severity.notice 100010 000025$ Sflow sample fortios.event.traffic,fortios.category.forward,fortios.severity.notice 100010 08192$ Infected file detected by the FortiGate unit and blocked fortios.event.virus,fortios.category.infected,fortios.severity.warning 100010 08193$ Infected file detected by the FortiGate unit and it passed fortios.event.virus,fortios.category.infected,fortios.severity.notice 100010 08194$ MIME header detected to have a virus and blocked fortios.event.virus,fortios.category.infected,fortios.severity.warning 100010 08195$ MIME header infected and passed fortios.event.virus,fortios.category.infected,fortios.severity.notice 100010 08200$ File is an executable (warning) fortios.event.virus,fortios.category.filetype-executable,fortios.severity.warning 100010 08201$ File is an executable (notice) fortios.event.virus,fortios.category.filetype-executable,fortios.severity.notice 100010 08202$ File reported infected by Outbreak Prevention (warning) fortios.event.virus,fortios.category.outbreak-prevention,fortios.severity.warning 100010 08203$ File reported infected by Outbreak Prevention (notice) fortios.event.virus,fortios.category.outbreak-prevention,fortios.severity.notice 100010 08204$ MIME data reported infected by Outbreak Prevention (warning) fortios.event.virus,fortios.category.outbreak-prevention,fortios.severity.warning 100010 08205$ MIME data reported infected by Outbreak Prevention (notice) fortios.event.virus,fortios.category.outbreak-prevention,fortios.severity.notice 100010 08206$ File reported matched AV exempt list (notice) fortios.event.virus,fortios.category.exempt-hash,fortios.severity.notice 100010 08207$ MIME data reported matched AV exempt list (notice) fortios.event.virus,fortios.category.exempt-hash,fortios.severity.notice 100010 08212$ File reported infected by external malware list (warning) fortios.event.virus,fortios.category.malware-list,fortios.severity.warning 100010 08213$ File reported infected by external malware list (notice) fortios.event.virus,fortios.category.malware-list,fortios.severity.notice 100010 08214$ MIME data reported infected by external malware list (warning) fortios.event.virus,fortios.category.malware-list,fortios.severity.warning 100010 08215$ MIME data reported infected by external malware list (notice) fortios.event.virus,fortios.category.malware-list,fortios.severity.notice 100010 08216$ File reported infected by EMS threat feed (warning) fortios.event.virus,fortios.category.ems-threat-feed,fortios.severity.warning 100010 08217$ File reported infected by EMS threat feed (notice) fortios.event.virus,fortios.category.ems-threat-feed,fortios.severity.notice 100010 08218$ MIME data reported infected by EMS threat feed (warning) fortios.event.virus,fortios.category.ems-threat-feed,fortios.severity.warning 100010 08219$ MIME data reported infected by EMS threat feed (notice) fortios.event.virus,fortios.category.ems-threat-feed,fortios.severity.notice 100010 08220$ File reported infected by FortiNDR (warning) fortios.event.virus,fortios.category.fortindr,fortios.severity.warning 100010 08221$ File reported infected by FortiNDR (notice) fortios.event.virus,fortios.category.fortindr,fortios.severity.notice 100010 08222$ MIME data reported infected by FortiNDR (warning) fortios.event.virus,fortios.category.fortindr,fortios.severity.warning 100010 08223$ MIME data reported infected by FortiNDR (notice) fortios.event.virus,fortios.category.fortindr,fortios.severity.notice 100010 08224$ Inline Block scan timeout (warning) fortios.event.virus,fortios.category.inline-block,fortios.severity.warning 100010 08225$ Inline Block scan timeout (notice) fortios.event.virus,fortios.category.inline-block,fortios.severity.notice 100010 08226$ MIME data reported Inline Block scan timeout (warning) fortios.event.virus,fortios.category.inline-block,fortios.severity.warning 100010 08227$ MIME data reported Inline Block scan timeout (notice) fortios.event.virus,fortios.category.inline-block,fortios.severity.notice 100010 08228$ Inline Block scan error (warning) fortios.event.virus,fortios.category.inline-block,fortios.severity.warning 100010 08229$ Inline Block scan error (notice) fortios.event.virus,fortios.category.inline-block,fortios.severity.notice 100010 08230$ MIME data reported Inline Block scan error (warning) fortios.event.virus,fortios.category.inline-block,fortios.severity.warning 100010 08231$ MIME data reported Inline Block scan error (notice) fortios.event.virus,fortios.category.inline-block,fortios.severity.notice 100010 08232$ File reported infected by FortiSandbox (warning) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.warning 100010 08233$ File reported infected by FortiSandbox (notice) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.notice 100010 08234$ MIME data reported infected by FortiSandbox (warning) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.warning 100010 08235$ MIME data reported infected by FortiSandbox (notice) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.notice 100010 08236$ FortiSandbox scan timeout (warning) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.warning 100010 08237$ FortiSandbox scan timeout (notice) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.notice 100010 08238$ MIME data reported FortiSandbox scan timeout (warning) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.warning 100010 08239$ MIME data reported FortiSandbox scan timeout (notice) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.notice 100010 08240$ FortiSandbox scan error (warning) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.warning 100010 08241$ FortiSandbox scan error (notice) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.notice 100010 08242$ MIME data reported FortiSandbox scan error (warning) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.warning 100010 08243$ MIME data reported FortiSandbox scan error (notice) fortios.event.virus,fortios.category.fortisandbox,fortios.severity.notice 100010 08448$ FortiGate unit blocked a file because it contains a virus fortios.event.virus,fortios.category.filename,fortios.severity.warning 100010 08450$ FortiGate unit blocked a file because it contains a virus (MIME) fortios.event.virus,fortios.category.mimefragmented,fortios.severity.warning 100010 08451$ FortiGate unit blocked a file because it contains a virus (MIME) fortios.event.virus,fortios.category.mimefragmented,fortios.severity.notice 100010 08452$ FortiGate unit blocked a virus command fortios.event.virus,fortios.category.command-blocked,fortios.severity.warning 100010 08704$ Defined file size limit was exceeded fortios.event.virus,fortios.category.oversize,fortios.severity.warning 100010 08705$ File size limit was exceeded fortios.event.virus,fortios.category.oversize,fortios.severity.notice 100010 08708$ Stream-based uncompression reached size limit. fortios.event.virus,fortios.category.oversize,fortios.severity.warning 100010 08709$ Stream-based uncompression reached size limit. fortios.event.virus,fortios.category.oversize,fortios.severity.notice 100010 08720$ Switching protocols request (warning) fortios.event.virus,fortios.category.switchproto,fortios.severity.warning 100010 08721$ Switching protocols request (notice) fortios.event.virus,fortios.category.switchproto,fortios.severity.notice 100010 08960$ File reached the uncompressed nested limit fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08961$ File reached the uncompressed size limit fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08962$ Archived file is corrupted fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08963$ Archived file is encrypted fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08964$ Corrupted archive (warning) fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08965$ Corrupted archive (notice) fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08966$ File is a multipart archive or contains multiple files within the archive fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08967$ File is a multipart archive or contains multiple files within the archive fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08968$ File is a nested archived file fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08969$ File is an archived type unhandled fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08970$ Archived file is oversized fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08971$ Archived file is oversized fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08972$ Unhandled archive (warning) fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08973$ Unhandled archive (notice) fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08974$ AV Engine load failed fortios.event.virus,fortios.category.scanerror,fortios.severity.error 100010 08975$ Partially corrupted archive (warning) fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08976$ Partially corrupted archive (notice) fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08979$ Archive scan timeout (warning) fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08980$ Archive scan timeout (notice) fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08981$ AV CDR engine internal error fortios.event.virus,fortios.category.scanerror,fortios.severity.error 100010 09233$ File submitted to Sandbox fortios.event.virus,fortios.category.analytics,fortios.severity.information 100010 09234$ File reported infected by FortiSandbox (warning) fortios.event.virus,fortios.category.infected,fortios.severity.warning 100010 09235$ File reported infected by FortiSandbox (notice) fortios.event.virus,fortios.category.infected,fortios.severity.notice 100010 09236$ File reported infected by FortiSandbox (warning) fortios.event.virus,fortios.category.infected,fortios.severity.warning 100010 09237$ File reported infected by FortiSandbox (notice) fortios.event.virus,fortios.category.infected,fortios.severity.notice 100010 09238$ File verdict returned from FortiSandbox fortios.event.virus,fortios.category.analytics,fortios.severity.notice 100010 09239$ Active content detected by Content Disarm engine fortios.event.virus,fortios.category.content-disarm,fortios.severity.notice 100010 09240$ File was disarmed by Content Disarm engine fortios.event.virus,fortios.category.content-disarm,fortios.severity.warning 100010 044032$ VoIP SIP fortios.event.voip,fortios.category.voip,fortios.severity.information 100010 044033$ VoIP SIP blocked fortios.event.voip,fortios.category.voip,fortios.severity.notice 100010 044034$ VoIP SIP fuzzing fortios.event.voip,fortios.category.voip,fortios.severity.information 100010 044035$ VoIP SCCP registered fortios.event.voip,fortios.category.voip,fortios.severity.information 100010 044036$ VoIP SCCP unregistered fortios.event.voip,fortios.category.voip,fortios.severity.information 100010 044037$ VoIP SCCP call blocked fortios.event.voip,fortios.category.voip,fortios.severity.information 100010 044038$ VoIP SCCP call information fortios.event.voip,fortios.category.voip,fortios.severity.information 100010 030248$ Web application firewall blocked application by signature fortios.event.waf,fortios.category.waf-signature,fortios.severity.warning 100010 030249$ Web application firewall passed application by signature fortios.event.waf,fortios.category.waf-signature,fortios.severity.warning 100010 030250$ Web application firewall erased application by signature fortios.event.waf,fortios.category.waf-signature,fortios.severity.warning 100010 030251$ Web application firewall blocked application by custom signature fortios.event.waf,fortios.category.waf-custom-signature,fortios.severity.warning 100010 030252$ Web application firewall allowed application by custom signature fortios.event.waf,fortios.category.waf-custom-signature,fortios.severity.warning 100010 030253$ Web application firewall blocked application by HTTP method fortios.event.waf,fortios.category.waf-http-method,fortios.severity.warning 100010 030255$ Web application firewall blocked application by address list fortios.event.waf,fortios.category.waf-address-list,fortios.severity.warning 100010 030257$ Web application firewall blocked application by HTTP constraints fortios.event.waf,fortios.category.waf-http-constraint,fortios.severity.warning 100010 030258$ Web application firewall allowed application by HTTP constraints fortios.event.waf,fortios.category.waf-http-constraint,fortios.severity.warning 100010 030259$ Web application firewall allowed application by URL access permit fortios.event.waf,fortios.category.waf-url-access,fortios.severity.warning 100010 030260$ Web application firewall allowed application by URL access bypass fortios.event.waf,fortios.category.waf-url-access,fortios.severity.warning 100010 030261$ Web application firewall blocked application by URL access fortios.event.waf,fortios.category.waf-url-access,fortios.severity.warning 100010 012288$ Web content banned word found fortios.event.webfilter,fortios.category.content,fortios.severity.warning 100010 012290$ Web content exempt word found fortios.event.webfilter,fortios.category.content,fortios.severity.notice 100010 012292$ Message contained a key word in the profile list fortios.event.webfilter,fortios.category.content,fortios.severity.notice 100010 012293$ Search phrase detected fortios.event.webfilter,fortios.category.content,fortios.severity.notice 100010 012544$ URL address was blocked because it was found in the URL filter list fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.warning 100010 012545$ URL address was exempted because it was found in the URL filter list fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.information 100010 012546$ URL address was allowed because it was found in the URL filter list fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.information 100010 012547$ The request contained an invalid domain name fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.notice 100010 012548$ HTTP certificate request contained an invalid domain name fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.notice 100010 012549$ HTTP request contained an invalid name so the session has been filtered by IP only fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.information 100010 012550$ HTTPS request contained an invalid name so the session has been filtered by IP only fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.information 100010 012551$ Insufficient resources fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.notice 100010 012552$ Getting the host name failed fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.information 100010 012553$ Server certificate validation failed fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.notice 100010 012554$ SSL session blocked because its identification number was unknown fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.notice 100010 012555$ SSL session blocked fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.notice 100010 012556$ SSL session ignored fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.notice 100010 012557$ The FortiGuard Analysis and Management Service is not active. You must enable this service fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.critical 100010 012558$ Rating error occurred fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.information 100010 012559$ URL passed because it was in the URL filter list fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.information 100010 012560$ URL blocked by Websense service fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.warning 100010 012561$ URL blocked with redirect message by Websense service fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.warning 100010 012562$ URL allowed by Websense service fortios.event.webfilter,fortios.category.urlfilter,fortios.severity.information 100010 012688$ URL address was exempted because it was found in the ssl-exempt fortios.event.webfilter,fortios.category.ssl-exempt,fortios.severity.information 100010 012800$ Rating error occurred (error) fortios.event.webfilter,fortios.category.ftgd_err,fortios.severity.error 100010 012801$ Rating error occurred (warning) fortios.event.webfilter,fortios.category.ftgd_err,fortios.severity.warning 100010 012802$ Daily FortiGuard quota status fortios.event.webfilter,fortios.category.ftgd_quota,fortios.severity.information 100010 013056$ URL belongs to an blocked category within the firewall policy fortios.event.webfilter,fortios.category.ftgd_blk,fortios.severity.warning 100010 013057$ URL belongs to a category with warnings enabled fortios.event.webfilter,fortios.category.ftgd_blk,fortios.severity.warning 100010 013312$ URL belongs to an allowed category within the firewall policy fortios.event.webfilter,fortios.category.ftgd_allow,fortios.severity.notice 100010 013315$ FortiGuard web filter category quota counting log message fortios.event.webfilter,fortios.category.ftgd_quota_counting,fortios.severity.notice 100010 013316$ FortiGuard web filter category quota expired log message fortios.event.webfilter,fortios.category.ftgd_quota_expired,fortios.severity.warning 100010 013317$ URL has been visited fortios.event.webfilter,fortios.category.urlmonitor,fortios.severity.notice 100010 013568$ ActiveX script removed fortios.event.webfilter,fortios.category.activexfilter,fortios.severity.notice 100010 013573$ Cookie removed fortios.event.webfilter,fortios.category.cookiefilter,fortios.severity.notice 100010 013584$ Java applet removed fortios.event.webfilter,fortios.category.appletfilter,fortios.severity.notice 100010 013600$ Script entity removed fortios.event.webfilter,fortios.category.scriptfilter,fortios.severity.notice 100010 013601$ Cookie removed entirely fortios.event.webfilter,fortios.category.cookiefilter,fortios.severity.notice 100010 013602$ Referrer removed from request fortios.event.webfilter,fortios.category.cookiefilter,fortios.severity.notice 100010 013603$ Command blocked fortios.event.webfilter,fortios.category.webfilter_command_block,fortios.severity.warning 100010 013616$ Blocked by HTTP header content type fortios.event.webfilter,fortios.category.content,fortios.severity.warning 100010 013632$ Depends on info in msg field fortios.event.webfilter,fortios.category.http_header_change,fortios.severity.notice 100010 013633$ Depends on info in msg field fortios.event.webfilter,fortios.category.http_header_change,fortios.severity.notice 100010 013648$ Antiphishing matched a URL filter rule without blocking the request. fortios.event.webfilter,fortios.category.antiphishing,fortios.severity.warning 100010 013649$ Antiphishing matched a Fortiguard category rule without blocking the request. fortios.event.webfilter,fortios.category.antiphishing,fortios.severity.warning 100010 013650$ Antiphishing reached default action without blocking the request. fortios.event.webfilter,fortios.category.antiphishing,fortios.severity.warning 100010 013651$ Antiphishing matched a URL filter rule and blocked the request. fortios.event.webfilter,fortios.category.antiphishing,fortios.severity.warning 100010 013652$ Antiphishing matched a Fortiguard category rule and blocked the request. fortios.event.webfilter,fortios.category.antiphishing,fortios.severity.warning 100010 013653$ Antiphishing reached default action and blocked the request. fortios.event.webfilter,fortios.category.antiphishing,fortios.severity.warning 100010 013664$ Video category is blocked. fortios.event.webfilter,fortios.category.videofilter-category,fortios.severity.warning 100010 013665$ Video category is monitored fortios.event.webfilter,fortios.category.videofilter-category,fortios.severity.notice 100010 013666$ Video category is allowed fortios.event.webfilter,fortios.category.videofilter-category,fortios.severity.notice 100010 013680$ Video channel is blocked. fortios.event.webfilter,fortios.category.videofilter-channel,fortios.severity.warning 100010 013681$ Video channel is monitored fortios.event.webfilter,fortios.category.videofilter-channel,fortios.severity.notice 100010 013682$ Video channel is allowed fortios.event.webfilter,fortios.category.videofilter-channel,fortios.severity.notice 100010 013696$ Unknown content-encoding detected and blocked. fortios.event.webfilter,fortios.category.unknown-ce,fortios.severity.warning 100010 013697$ Scan is bypassed due to unknown content-encoding. fortios.event.webfilter,fortios.category.unknown-ce,fortios.severity.notice 100010 022022$ Extreme low memory mode entered fortios.event.event,fortios.category.system,fortios.severity.critical 100010 022023$ Extreme low memory mode exited fortios.event.event,fortios.category.system,fortios.severity.critical 100010 010000$ Web content banned activity found fortios.event.casb,fortios.category.casb,fortios.severity.warning 100010 010001$ Web content activity found fortios.event.casb,fortios.category.casb,fortios.severity.information 100010 010002$ Web content activity found fortios.event.casb,fortios.category.casb,fortios.severity.information 100010 020136$ FortiGuard Data leak server prevention license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020137$ Attack Surface Security Rating Service license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020138$ FortiGuard SD-WAN Overlay as a Service license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020139$ FortiGSLB Cloud Account Level license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020140$ FortiSASE Secure Private Access license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020141$ FortiSASE LAN Extension license expiring fortios.event.event,fortios.category.system,fortios.severity.warning 100010 020150$ Device vulnerability lookup on FortiGuard fortios.event.event,fortios.category.system,fortios.severity.notice 100010 022817$ Scanunit DLP signature update error fortios.event.event,fortios.category.system,fortios.severity.warning 100010 022874$ Switch-controller FortilinkLite new connection fortios.event.event,fortios.category.switch-controller,fortios.severity.notice 100010 022875$ Switch-controller FortilinkLite connection down fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 022876$ Switch-controller FortilinkLite received bootstrap fortios.event.event,fortios.category.switch-controller,fortios.severity.information 100010 022877$ Switch-controller FortilinkLite tunnel online fortios.event.event,fortios.category.switch-controller,fortios.severity.notice 100010 022878$ Switch-controller FortilinkLite tunnel offline fortios.event.event,fortios.category.switch-controller,fortios.severity.critical 100010 022937$ SDWAN application performance metrics via FortiMonitor fortios.event.event,fortios.category.sdwan,fortios.severity.information 100010 022938$ SD-WAN Bandwidth monitoring result fortios.event.event,fortios.category.sdwan,fortios.severity.information 100010 022939$ SD-WAN fail detect fortios.event.event,fortios.category.sdwan,fortios.severity.notice 100010 022940$ Link monitor fail detect fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032055$ KAT tests succeeded fortios.event.event,fortios.category.system,fortios.severity.information 100010 034420$ NP6XLITE HPE is dropping packets fortios.event.event,fortios.category.system,fortios.severity.warning 100010 034421$ NP6XLITE HPE under a packets flood fortios.event.event,fortios.category.system,fortios.severity.critical 100010 035051$ Create PCP mapping fortios.event.event,fortios.category.system,fortios.severity.information 100010 035052$ Delete PCP mapping fortios.event.event,fortios.category.system,fortios.severity.information 100010 035053$ Renew PCP mapping fortios.event.event,fortios.category.system,fortios.severity.information 100010 040961$ Icap remote server stat fortios.event.event,fortios.category.webproxy,fortios.severity.notice 100010 045101$ FortiClient registered fortios.event.event,fortios.category.endpoint,fortios.severity.notice 100010 045132$ EMS entry could not be upgraded fortios.event.event,fortios.category.endpoint,fortios.severity.error 100010 045133$ FCEMS shared memory missing query statistics fortios.event.event,fortios.category.endpoint,fortios.severity.warning 100010 046518$ LTE modem active SIM card switch event fortios.event.event,fortios.category.system,fortios.severity.information 100010 046519$ LTE modem active SIM card switched: modem disconnection detected fortios.event.event,fortios.category.system,fortios.severity.notice 100010 046520$ LTE modem active SIM card switched: link monitor probe failure detected fortios.event.event,fortios.category.system,fortios.severity.notice 100010 046521$ LTE modem active SIM card slot flipped back and forth in short time fortios.event.event,fortios.category.system,fortios.severity.warning 100010 046522$ LTE billing data usage reached configured threshold fortios.event.event,fortios.category.system,fortios.severity.information 100010 046523$ LTE billing time passed, refresh billing date counter fortios.event.event,fortios.category.system,fortios.severity.information 100010 046524$ LTE modem active SIM card switched: data plan reached fortios.event.event,fortios.category.system,fortios.severity.information 100010 046525$ LTE modem stop network due to data plan reached fortios.event.event,fortios.category.system,fortios.severity.information 100010 046526$ LTE billing data usage reached data limit fortios.event.event,fortios.category.system,fortios.severity.information 100010 053320$ FortiConverter ticket has a result file ready fortios.event.event,fortios.category.system,fortios.severity.notice 100010 053321$ Uploaded local config to a FortiConverter ticket fortios.event.event,fortios.category.system,fortios.severity.notice 100010 062308$ Error occured during SSL handshake. fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.information 100010 062309$ Server certificate has security problem fortios.event.ssl,fortios.category.ssl-anomaly,fortios.severity.notice 100010 064600$ Traffic was blocked by OT virtual patch fortios.event.virtual-patch,fortios.category.ot-vpatch,fortios.severity.warning 100010 064601$ Traffic was detected by OT virtual patch fortios.event.virtual-patch,fortios.category.ot-vpatch,fortios.severity.notice 100010 064610$ Traffic was blocked by local-in virtual patch fortios.event.virtual-patch,fortios.category.localin-vpatch,fortios.severity.warning 100010 064611$ Traffic was detected by local-in virtual patch fortios.event.virtual-patch,fortios.category.localin-vpatch,fortios.severity.notice 100010 08982$ Exceeded max AV memory fortios.event.virus,fortios.category.scanerror,fortios.severity.error 100010 013617$ Exempted by HTTP header content type fortios.event.webfilter,fortios.category.content,fortios.severity.information 100010 013712$ Video title is blocked. fortios.event.webfilter,fortios.category.videofilter-title,fortios.severity.warning 100010 013713$ Video title is monitored fortios.event.webfilter,fortios.category.videofilter-title,fortios.severity.notice 100010 013714$ Video title is allowed fortios.event.webfilter,fortios.category.videofilter-title,fortios.severity.notice 100010 013728$ Video description is blocked. fortios.event.webfilter,fortios.category.videofilter-description,fortios.severity.warning 100010 013729$ Video description is monitored fortios.event.webfilter,fortios.category.videofilter-description,fortios.severity.notice 100010 013730$ Video description is allowed fortios.event.webfilter,fortios.category.videofilter-description,fortios.severity.notice 100010 020047$ RADVD failed to create an IPv6 socket fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020048$ RADVD failed to set IPv6 packet info fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020049$ RADVD failed to set IPv6 checksum fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020050$ RADVD failed to set IPv6 unicast hops fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020051$ RADVD failed to set IPv6 multicast hops fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020052$ RADVD failed to set IPv6 hop limit fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020053$ RADVD failed to set ICMPv6 filter fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020054$ RADVD exited due to received signal fortios.event.event,fortios.category.system,fortios.severity.information 100010 020055$ RADVD interface query creation failed fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020056$ RADVD query error fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020057$ RADVD virtual interface not found fortios.event.event,fortios.category.system,fortios.severity.critical 100010 020058$ RADVD unloaded interface fortios.event.event,fortios.category.system,fortios.severity.information 100010 022914$ FortiGate Cloud server changed fortios.event.event,fortios.category.system,fortios.severity.notice 100010 032053$ Admin monitor login successful fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032054$ Admin monitor logout successful fortios.event.event,fortios.category.system,fortios.severity.alert 100010 032199$ Image restored from USB fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032567$ Configuration restored by USB fortios.event.event,fortios.category.system,fortios.severity.critical 100010 032570$ Admin monitor disconnected fortios.event.event,fortios.category.system,fortios.severity.alert 100010 044549$ Object attribute configured by maintainer fortios.event.event,fortios.category.system,fortios.severity.alert 100010 044550$ Object configured by maintainer fortios.event.event,fortios.category.system,fortios.severity.alert 100010 044551$ Attribute configured by maintainer fortios.event.event,fortios.category.system,fortios.severity.alert 100010 044552$ Path configured by maintainer fortios.event.event,fortios.category.system,fortios.severity.alert 100010 08983$ FortiNDR submission failure (warning) fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08984$ FortiNDR submission failure (notice) fortios.event.virus,fortios.category.scanerror,fortios.severity.notice 100010 08985$ FortiNDR scan timeout (warning) fortios.event.virus,fortios.category.scanerror,fortios.severity.warning 100010 08986$ FortiNDR scan timeout (notice) fortios.event.virus,fortios.category.scanerror,fortios.severity.notice