Fortinet white logo
Fortinet white logo

Log Reference

Log ID

Log ID

The log_id field is in every FortiRecorder log message. log_idis a 10-digit unique identifier for a specific root cause.

Digits

Description

First two

Type

  • 08 is kevent
  • 06 is camera
  • 11 is detection

Next two

Subtype

The meaning of these digits varies because each type has different subtypes.

For example, if the first two digits are 08 (type=kevent), then the next two digits correspond to its subtypes:

  • 01 is admin
  • 02 is system
  • etc.

For other types, 01, 02, etc. correspond to their subtypes instead.

Last six

Event ID

The meaning of these digits varies because each type and subtype has different associated events.

For example, for administrator-related system events (prefix 0801), event ID 000001 indicates a successful administrator login. Motion detection does not have this same type of event.

Note

Other log messages that share the same root cause have the same log_id. The log_id is not a unique identifier for each time that the event has occurred. Instead, it provides a consistent identifier for the same kind of event, because details in the msg field may vary each time.

To find other occurrences of the same log_id, in the FortiRecorder GUI, you can click the Log ID column header to sort them together.

You can search for a log ID in this document to find its meaning and possible solutions.

Log ID

Log ID

The log_id field is in every FortiRecorder log message. log_idis a 10-digit unique identifier for a specific root cause.

Digits

Description

First two

Type

  • 08 is kevent
  • 06 is camera
  • 11 is detection

Next two

Subtype

The meaning of these digits varies because each type has different subtypes.

For example, if the first two digits are 08 (type=kevent), then the next two digits correspond to its subtypes:

  • 01 is admin
  • 02 is system
  • etc.

For other types, 01, 02, etc. correspond to their subtypes instead.

Last six

Event ID

The meaning of these digits varies because each type and subtype has different associated events.

For example, for administrator-related system events (prefix 0801), event ID 000001 indicates a successful administrator login. Motion detection does not have this same type of event.

Note

Other log messages that share the same root cause have the same log_id. The log_id is not a unique identifier for each time that the event has occurred. Instead, it provides a consistent identifier for the same kind of event, because details in the msg field may vary each time.

To find other occurrences of the same log_id, in the FortiRecorder GUI, you can click the Log ID column header to sort them together.

You can search for a log ID in this document to find its meaning and possible solutions.