User

The user field is in FortiMail log messages where either:

• type=kevent

• type=event

• type=spam

It indicates who performed the action that is recorded in the event.

Field Value	Description
user=admin user="alice@example.com"	An administrator or email user.
user=system ui=ntpd (name of the daemon) (empty)	FortiMail system.