Device ID
If you configure FortiRecorder to send logs to FortiAnalyzer or other Syslog servers, then the device ID (devid) field is added to the header. Remote log servers often receive log messages from many devices, so the serial number in the devid field indicates which device recorded the log messages.
This field does not appear when you download log files to your computer, or view logs on FortiRecorder itself.