00066002

Either:

• An administrator edited the Severity and Trigger Action settings in a custom access rule.
• An administrator edited a signature violation filter in a custom access rule.

00066002

See Log ID numbers.

date=2016-02-24 time=11:59:11 log_id=00066002 msg_id=001248141094 device_id=FV-3KC3R09700002 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" type=event subtype="admin" pri=information trigger_policy="" user=admin ui=GUI action=edit status=success msg="User admin changed custom-rule New-custom-access-rule-for-web from GUI(172.22.6.1)"

date=2016-02-24 time=12:17:02 log_id=00066002 msg_id=001248141108 device_id=FV-3KC3R09700002 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" type=event subtype="admin" pri=information trigger_policy="" user=admin ui=GUI action=edit status=success msg="User admin changed custom-rule New-custom-access-rule-for-web from GUI(172.22.6.1)"