10000014
Meaning | |
---|---|
An administrator deleted a locally-stored attack log, event log, or traffic log file. |
Field name | Description |
ID ( |
See Log ID numbers. |
Sub Type ( |
See Subtypes. |
Level ( |
See Priority level. |
User ( |
<administrator_name>
|
User Interface ( |
{GUI(<mgmt_ip>) | none | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console} Logins from |
Action ( |
del
|
Status ( |
success
|
Message ( |
User <administrator_name> has deleted disk log <file_str> from {GUI(<mgmt_ip>) | none | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console} |
Examples | |
---|---|
date=2014-04-10 time=18:09:47 log_id=10000014 msg_id=000000195890 device_id=FV-1KD3A13800012 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" type=event subtype="system" pri=notice trigger_policy="" user=admin ui=GUI action=del status=success msg="User admin has deleted disk log elog(2014-04-09-23:34:02).log from GUI(172.22.6.240)" |