Log Reference

• About Fortinet logs
  • Accessing FortiMail log messages
  • Log message syntax
  • Log types
  • Subtypes
  • Severity/Priority levels
  • Log message cross search
• History/Statistics logs
  • Policy ID and domain fields
  • Log message dispositions and classifiers
  • DNS resolution result field
• System Event Admin logs
  • User login
  • Webmail login
  • User login failure
  • WebMail GUI failure
  • Message retrieval failure
  • Message cannot be read
  • Attachment saving failure
  • LCD login
  • LCD login failure
• System Event Config logs
  • FortiGuard autoupdate settings
  • System update setting
  • Interface IP address
  • Access methods/status
  • Interface status
  • Interface status/PPPoE status
  • Interface status/PPPoE settings
  • Management IP
  • Interface access methods
  • MTU change
  • Addressing mode of interface access methods
  • Connect option of interface access methods
  • DNS change
  • Primary DNS and secondary DNS
  • Default gateway
  • Route entry
  • Route with destination IP address/netmask
  • Routing entry
  • System timezone
  • Daylight saving time
  • NTP server settings
  • System time
  • Console pageNo setting
  • Console mode setting
  • Idle timeout
  • Authentication timeout
  • System language
  • LCD PIN number
  • LCD PIN protection
  • GUI refresh interval
  • System idle and auth timeout
  • Admin addition
  • Admin change
  • Admin deletion
  • Admin password change
  • HA settings
  • SNMP status
  • SNMP config info
  • SNMP CPU threshold
  • SNMP memory threshold
  • SNMP Logdisk threshold
  • SNMP maildisk threshold
  • SNMP deferred mqueue threshold
  • SNMP virus detection threshold
  • SNMP spam detection threshold
  • SNMP community entry
  • SNMP community and host entry
  • FortiMail disclaimer in header for outgoing messages
  • FortiMail disclaimer in body for incoming messages
  • FortiMail disclaimer in header for incoming messages
  • Local domains
  • POP3 server port number
  • Relay server name
  • SMTP auth
  • SMTP over ssl
  • SMTP server port number
  • Status of email archiving
  • Email archiving account
  • Email archiving rotate setting
  • Archiving settings on local server
  • Archiving settings on remote server
  • Archiving policy
  • Archiving exempt
  • System quarantine account
  • System quarantine rotate setting
  • System quarantine quota settings
  • System quarantine settings
  • Mail server settings
  • FortiMail appearance information
  • FortiMail mail gw user group
  • Permission of mail
  • Mail server access
  • Local domain deletion
  • Local domain addition
  • Local user
  • Local domain name
  • User group
  • Mail user addition/deletion
  • Mail server user addition
  • Mail server user set with information
  • Mail server user added with information
  • Mail server user deletion
  • Disk quota of email archiving account
  • Password of email archiving account
  • Forwarding address for email archiving
  • Password of system quarantine account
  • Forwarding address for system quarantine
  • Password of mail user
  • Display name of mail user
  • User alias
  • POP3 auth profile
  • IMAP auth profile
  • Email banned word
  • Local log setting
  • Memory log setting
  • Log setting
  • Log setting elog
  • Log policy
  • Alertemail setting
  • Alertemail SMTP server
  • Alertemail target email addresses
  • Alertemail configuration
• System Event DNS logs
  • DNS query result
• System Event HA logs
  • Master startup
  • Slave startup
  • HA role change
  • Heartbeat check
  • Synchronization activities
• System Event System logs
  • DNS servers
  • System restart
  • System shutdown
  • System reload
  • System reset
  • System firmware upgrade
  • Upgrade system firmware failed
  • System mode
• System Event Update logs
  • FortiGuard update result
• Mail Event IMAP logs
  • IMAP-related events
• Mail Event POP3 logs
  • POP3-related events
• Mail Event SMTP logs
  • SMTP-related events
  • Starting flgrptd
  • Virus db loaded
  • FortiGuard antispam rule (FSAR) loading
  • FASR readme
  • FortiGuard antispam rule (FSAR) loaded
  • Mail aliases rebuilt
  • Updated daemon restarted
  • Antivirus database loading
  • Antivirus database loaded
  • Bayesian database training
  • Bayesian database training completed
• Mail Event Webmail logs
  • User login
• Antivirus logs
  • Virus infection
• Antispam logs
  • Spam-related events
• Encryption logs
  • Email encryption
• Change Log