From (header)

The hfrom field is in FortiMail log messages where type=statistics.

It indicates the sender email address in the message header (From:), which may be different from the SMTP envelope in some normal use cases.