Fortinet black logo

Log Message Reference

11003601

11003601

Meaning

FortiWeb has detected a change to a website file that could indicate a defacement attack.

Field name Description

ID

(log_id)

11003601

See Log ID numbers.

Sub Type

(subtype)

system

See Subtypes.

User

(user)

daemon

User Interface

(ui)

daemon

Action

(action)

monitor

Status

(status)

success

Message

(msg)

File <file_name> on site <site_name> has been changed. Please confirm or restore it.

Examples

date=2014-04-10 time=14:43:11 log_id=11003601 msg_id=000044296936 device_id=FV-1KD3A13800002 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" type=event subtype="system" pri=warning trigger_policy="" user=daemon ui=daemon action=monitor status=failed msg="File [/sig-db/signature.db] on site [2] has been changed. Please confirm or restore it."

11003601

Meaning

FortiWeb has detected a change to a website file that could indicate a defacement attack.

Field name Description

ID

(log_id)

11003601

See Log ID numbers.

Sub Type

(subtype)

system

See Subtypes.

User

(user)

daemon

User Interface

(ui)

daemon

Action

(action)

monitor

Status

(status)

success

Message

(msg)

File <file_name> on site <site_name> has been changed. Please confirm or restore it.

Examples

date=2014-04-10 time=14:43:11 log_id=11003601 msg_id=000044296936 device_id=FV-1KD3A13800002 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" type=event subtype="system" pri=warning trigger_policy="" user=daemon ui=daemon action=monitor status=failed msg="File [/sig-db/signature.db] on site [2] has been changed. Please confirm or restore it."