Log ID definitions

Log ID definitions

Following are the definitions for the log type IDs and subtype IDs applicable to FortiOS:

Log Category IDs	Subtype IDs
traffic: 0	forward: 0 local: 1 multicast: 2 sniffer: 4
event: 1	system: 0 vpn: 1 user: 2 router: 3 wireless: 4 wad: 5 endpoint: 7 ha: 8 compliance-check: 9 security-rating: 10
voip: 2	voip: 14
av: 3	analytics: 1 botnet: 2 filetype-executable: 3 content-disarm: 5 command-blocked: 6 infected: 11 filename: 12 oversize: 13 mimefragmented: 61 scanerror: 62 switchproto: 63
web: 4	content: 14 urlfilter: 15 ftgd_blk: 16 ftgd_allow: 17 ftgd_err: 18 activexfilter: 35 cookiefilter: 36 appletfilter: 37 ftgd_quota_counting: 38 ftgd_quota: 40 scriptfilter: 41 webfilter_command_block: 43 http_header_change: 44 ssl-exempt: 45
ips: 5	signature: 19 malicious-url: 21
anomaly: 6	anomaly: 20
email: 7	msn-hotmail: 5 yahoo-mail: 6 gmail: 7 smtp: 8 pop3: 9 imap: 10 mapi: 11 carrier-endpoint-filter: 47 mass-mms: 52
dlp: 8	dlp: 54
app: 9	app-ctrl-all: 59
waf: 10	waf-signature: 0 waf-custom-signature: 1 waf-http-method: 2 waf-http-constraint: 3 waf-address-list: 4 waf-url-access: 5
gtp: 11	gtp-all: 0
dns: 12	dns-query: 0 dns-response: 1
ssh: 13	ssh-command: 0 ssh-channel: 1

Log ID definitions

Following are the definitions for the log type IDs and subtype IDs applicable to FortiOS:

Log Category IDs

Subtype IDs

traffic: 0

event: 1

voip: 2

av: 3

web: 4

ips: 5

anomaly: 6

email: 7

dlp: 8

app: 9

waf: 10

gtp: 11

dns: 12

ssh: 13