0000000100 (configuration change)
This log ID represents a subtype of the event log. It could mean any changes made to the configuration of your FortiADC unit. The actions (changes) could be edit, delete, add, or backup.
All 000000100 (configuration change) log messages include the following fields:
-
cofgobj
—configuration object -
cfgpath
—configuration path -
cfgattr
—configuration attribute
For instance, if the administrator has changed the IP address for Port 1 from 192.168.1.99/24 to 172.30.154,141, the event will be logged as below:
date=2018-01-23 time=16:18:15 log_id=0000000100 type=event subtype=config pri=information vd=root msg_id=39242021 user=admin ui=GUI(172.30.16.64) action=add cfgpath=global-load-balance data-center cfgobj=name cfgattr=dc1 logdesc=Change the configuration msg=added a new entry 'dc1' for "global-load-balance data-center" on domain "root"
0001001000 (admin login)
These log messages relate to administration login events to your FortiADC unit. The same log ID could cover any of the following events:
Admin login failed
Message:User [name] login failed from [GUI|ssh|console]
Meaning: Login attempt by (user name) from the GUI/SSH/Console failed.
Priority: Notification
Admin login failed for 3 times
Message:User [name] from [GUI|ssh|console]has been tried more than 3 times.
Meaning: Login attempts by (user name) from the GUI/SSH/Console failed for three times
Priority: Notification
Admin login failed for blockip
Message:User [name] login failed from blocked ip [ip address]
Meaning: Login attempt by (user name) from (IP address) was denied because this IP address was blocked.
Priority: Notification
Admin login success
Message:User [name] login successfully from [GUI|ssh|console]
Meaning: (User name) successfully logged into the unit from the GUI/SSH/Console.
Priority: Information
0001001001 (admin logout)
These log messages relate to administration logout events from your FortiADC unit. The same log ID could cover either of the following events:
Admin logout
Message:User [name] logout from [GUI|ssh|console]
Meaning: (User name) logged out from the GUI/SSH/Console.
Priority: Information.
Admin timeout
Message:User [name] time out from [GUI|ssh|console]
Meaning: (User name) was logged out from the GUI/SSH/Console because the session had been idle for too long.
Priority: Information.