Fortinet black logo

Log Message Reference

10000014

10000014

Meaning

An administrator deleted a locally-stored attack log, event log, or traffic log file.

Field name Description

ID

(log_id)

10000014

See Log ID numbers.

Sub Type

(subtype)

system

See Subtypes.

Level

(pri)

notice

See Priority level.

User

(user)

<administrator_name>

User Interface

(ui)

{GUI(<mgmt_ip>) | none | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console}

Logins from jsconsole indicate use of the CLI Console widget on System > Status > Status in the web UI (GUI). The source IP address is the same as the one recorded in the corresponding log message for the GUI login.

Action

(action)

del

Status

(status)

success

Message

(msg)

User <administrator_name> has deleted disk log <file_str> from {GUI(<mgmt_ip>) | none | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console}

Examples

date=2014-04-10 time=18:09:47 log_id=10000014 msg_id=000000195890 device_id=FV-1KD3A13800012 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" type=event subtype="system" pri=notice trigger_policy="" user=admin ui=GUI action=del status=success msg="User admin has deleted disk log elog(2014-04-09-23:34:02).log from GUI(172.22.6.240)"

Related

10000014

Meaning

An administrator deleted a locally-stored attack log, event log, or traffic log file.

Field name Description

ID

(log_id)

10000014

See Log ID numbers.

Sub Type

(subtype)

system

See Subtypes.

Level

(pri)

notice

See Priority level.

User

(user)

<administrator_name>

User Interface

(ui)

{GUI(<mgmt_ip>) | none | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console}

Logins from jsconsole indicate use of the CLI Console widget on System > Status > Status in the web UI (GUI). The source IP address is the same as the one recorded in the corresponding log message for the GUI login.

Action

(action)

del

Status

(status)

success

Message

(msg)

User <administrator_name> has deleted disk log <file_str> from {GUI(<mgmt_ip>) | none | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console}

Examples

date=2014-04-10 time=18:09:47 log_id=10000014 msg_id=000000195890 device_id=FV-1KD3A13800012 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" type=event subtype="system" pri=notice trigger_policy="" user=admin ui=GUI action=del status=success msg="User admin has deleted disk log elog(2014-04-09-23:34:02).log from GUI(172.22.6.240)"

Related