Fortinet black logo

Log Message Reference

00004402

Copy Link
Copy Doc ID a10d0919-b701-11ec-9fd1-fa163e15d75b:483219
Download PDF

00004402

Meaning

A FortiWeb administrator changed the IP address or allowed administrative access protocols of a network interface. This does not include bringing up or bringing down the interface (see 11006004).

Field name Description

ID

(log_id)

00004402

See Log ID numbers.

Sub Type

(subtype)

admin

See Subtypes.

Level

(pri)

information

See Priority level.

User

(user)

<administrator_name>

User Interface

(ui)

{GUI | none | telnet | ssh | console}

Logins from jsconsole indicate use of the CLI Console widget on System > Status > Status in the web UI (GUI). The source IP address is the same as the one recorded in the corresponding log message for the GUI login.

Message

(msg)

User <administrator_name> changed interface <interface_name> from {GUI(<mgmt_ip>) | none | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console}

Examples

date=2013-10-06 time=11:00:19 log_id=00004402 msg_id=000000001085 device_id=FVVM040000010871 vd="root" timezone="(GMT-5:00)Eastern Time(US & Canada)" type=event subtype="admin" pri=information trigger_policy="" user=admin ui=console action=edit status=success msg="User admin changed interface port1 from console"

Related

00004402

Meaning

A FortiWeb administrator changed the IP address or allowed administrative access protocols of a network interface. This does not include bringing up or bringing down the interface (see 11006004).

Field name Description

ID

(log_id)

00004402

See Log ID numbers.

Sub Type

(subtype)

admin

See Subtypes.

Level

(pri)

information

See Priority level.

User

(user)

<administrator_name>

User Interface

(ui)

{GUI | none | telnet | ssh | console}

Logins from jsconsole indicate use of the CLI Console widget on System > Status > Status in the web UI (GUI). The source IP address is the same as the one recorded in the corresponding log message for the GUI login.

Message

(msg)

User <administrator_name> changed interface <interface_name> from {GUI(<mgmt_ip>) | none | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console}

Examples

date=2013-10-06 time=11:00:19 log_id=00004402 msg_id=000000001085 device_id=FVVM040000010871 vd="root" timezone="(GMT-5:00)Eastern Time(US & Canada)" type=event subtype="admin" pri=information trigger_policy="" user=admin ui=console action=edit status=success msg="User admin changed interface port1 from console"

Related