Fortinet Document Library

Version:


Table of Contents

5.3.1
Download PDF
Copy Link

0000000100 (configuration change)

This log ID represents a subtype of the event log. It could mean any changes made to the configuration of your FortiADC unit. The actions (changes) could be edit, delete, add, or backup.

All 000000100 (configuration change) log messages include the following fields:

  • cofgobj —configuration object
  • cfgpath —configuration path
  • cfgattr—configuration attribute

For instance, if the administrator has changed the IP address for Port 1 from 192.168.1.99/24 to 172.30.154,141, the event will be logged as below:

date=2018-01-23 time=16:18:15 log_id=0000000100 type=event subtype=config pri=information vd=root msg_id=39242021 user=admin ui=GUI(172.30.16.64) action=add cfgpath=global-load-balance data-center cfgobj=name cfgattr=dc1 logdesc=Change the configuration msg=added a new entry 'dc1' for "global-load-balance data-center" on domain "root"

0001001000 (admin login)

These log messages relate to administration login events to your FortiADC unit. The same log ID could cover any of the following events:

Admin login failed

Message:User [name] login failed from [GUI|ssh|console]

Meaning: Login attempt by (user name) from the GUI/SSH/Console failed.

Priority: Notification

Admin login failed for 3 times

Message:User [name] from [GUI|ssh|console]has been tried more than 3 times.

Meaning: Login attempts by (user name) from the GUI/SSH/Console failed for three times

Priority: Notification

Admin login failed for blockip

Message:User [name] login failed from blocked ip [ip address]

Meaning: Login attempt by (user name) from (IP address) was denied because this IP address was blocked.

Priority: Notification

Admin login success

Message:User [name] login successfully from [GUI|ssh|console]

Meaning: (User name) successfully logged into the unit from the GUI/SSH/Console.

Priority: Information

0001001001 (admin logout)

These log messages relate to administration logout events from your FortiADC unit. The same log ID could cover either of the following events:

Admin logout

Message:User [name] logout from [GUI|ssh|console]

Meaning: (User name) logged out from the GUI/SSH/Console.

Priority: Information.

Admin timeout

Message:User [name] time out from [GUI|ssh|console]

Meaning: (User name) was logged out from the GUI/SSH/Console because the session had been idle for too long.

Priority: Information.

0000000100 (configuration change)

This log ID represents a subtype of the event log. It could mean any changes made to the configuration of your FortiADC unit. The actions (changes) could be edit, delete, add, or backup.

All 000000100 (configuration change) log messages include the following fields:

  • cofgobj —configuration object
  • cfgpath —configuration path
  • cfgattr—configuration attribute

For instance, if the administrator has changed the IP address for Port 1 from 192.168.1.99/24 to 172.30.154,141, the event will be logged as below:

date=2018-01-23 time=16:18:15 log_id=0000000100 type=event subtype=config pri=information vd=root msg_id=39242021 user=admin ui=GUI(172.30.16.64) action=add cfgpath=global-load-balance data-center cfgobj=name cfgattr=dc1 logdesc=Change the configuration msg=added a new entry 'dc1' for "global-load-balance data-center" on domain "root"

0001001000 (admin login)

These log messages relate to administration login events to your FortiADC unit. The same log ID could cover any of the following events:

Admin login failed

Message:User [name] login failed from [GUI|ssh|console]

Meaning: Login attempt by (user name) from the GUI/SSH/Console failed.

Priority: Notification

Admin login failed for 3 times

Message:User [name] from [GUI|ssh|console]has been tried more than 3 times.

Meaning: Login attempts by (user name) from the GUI/SSH/Console failed for three times

Priority: Notification

Admin login failed for blockip

Message:User [name] login failed from blocked ip [ip address]

Meaning: Login attempt by (user name) from (IP address) was denied because this IP address was blocked.

Priority: Notification

Admin login success

Message:User [name] login successfully from [GUI|ssh|console]

Meaning: (User name) successfully logged into the unit from the GUI/SSH/Console.

Priority: Information

0001001001 (admin logout)

These log messages relate to administration logout events from your FortiADC unit. The same log ID could cover either of the following events:

Admin logout

Message:User [name] logout from [GUI|ssh|console]

Meaning: (User name) logged out from the GUI/SSH/Console.

Priority: Information.

Admin timeout

Message:User [name] time out from [GUI|ssh|console]

Meaning: (User name) was logged out from the GUI/SSH/Console because the session had been idle for too long.

Priority: Information.