Fortinet black logo

Log Message Reference

20000029

20000029

Meaning

XML Validation Violation.

Field name Description

log_id

20000029

See Log ID numbers.

main_type

XML Validation Violation

subtype

  • XML Schema Validation Violation
  • XML Element Attribute Number Overflow
  • XML Element Attribute Name Length Violations
  • XML Element Attribute Value Length Violations
  • XML Element Cdata Length Violations
  • XML Element Depth Violations
  • XML Element Name Length Violations
  • XML External Entity Violation
  • XML Entity Expansion Violations
  • XML XInclude Violation
  • XML SchemaLocation Violation
  • XML SOAP Protocol Violation
  • XML SOAPAction Violation
  • XML SOAP Header Violation
  • XML SOAP Body Violation
  • SOAP Signature Error
  • SOAP Signature Verification Error
  • SOAP Encryption Error
  • SOAP Decryption Error
  • WS-I Basic Profile Check

  • XML SOAP Attachment Violation

  • XML Format Violation

Examples

v012xxxxdate=2022-05-31 time=17:01:25 log_id=20000029 msg_id=000004625221 device_id=FV-1KET119900275 vd="root" timezone="(GMT-8:00)Pacific Time(US&Canada)" timezone_dayst="GMTa+7" type=attack pri=alert main_type="XML Validation Violation" sub_type="XML Schema Validation Violation" trigger_policy="N/A" severity_level=Medium proto=tcp service=https/tls1.2 backend_service=unknown action=Alert policy="FWB_Policy_Default_AutoTest" src=10.0.4.13 src_port=59291 dst=10.20.4.22 dst_port=80 http_method=post http_url="/testPath" http_host="172.22.6.4:8080" http_agent="none" http_session_id=none msg="XML Schema Validation Violation : Failed to validate schema schema1.xsd. Element '{http://www.w3school.com.cn}dateborn': 'aaa' is not a valid value of the atomic type 'xs:date'." signature_subclass="N/A" signature_id="N/A" signature_cve_id="N/A" srccountry="Reserved" content_switch_name="none" server_pool_name="FWB_server_pool" false_positive_mitigation="none" user_name="Unknown" monitor_status="Disabled" http_refer="none" http_version="2.0" dev_id="none" es=0 threat_weight=25 history_threat_weight=0 threat_level=Moderate ftp_mode="N/A" ftp_cmd="N/A" cipher_suite="TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" ml_log_hmm_probability=0.000000 ml_log_sample_prob_mean=0.000000 ml_log_sample_arglen_mean=0.000000 ml_log_arglen=0 ml_svm_log_main_types=0 ml_svm_log_match_types="none" ml_svm_accuracy="none" ml_domain_index=0 ml_url_dbid=0 ml_arg_dbid=0 ml_allow_method="none" owasp_top10="A05:2021-Security Misconfiguration" bot_info="none" client_level="Unidentified" x509_cert_subject="none"

20000029

Meaning

XML Validation Violation.

Field name Description

log_id

20000029

See Log ID numbers.

main_type

XML Validation Violation

subtype

  • XML Schema Validation Violation
  • XML Element Attribute Number Overflow
  • XML Element Attribute Name Length Violations
  • XML Element Attribute Value Length Violations
  • XML Element Cdata Length Violations
  • XML Element Depth Violations
  • XML Element Name Length Violations
  • XML External Entity Violation
  • XML Entity Expansion Violations
  • XML XInclude Violation
  • XML SchemaLocation Violation
  • XML SOAP Protocol Violation
  • XML SOAPAction Violation
  • XML SOAP Header Violation
  • XML SOAP Body Violation
  • SOAP Signature Error
  • SOAP Signature Verification Error
  • SOAP Encryption Error
  • SOAP Decryption Error
  • WS-I Basic Profile Check

  • XML SOAP Attachment Violation

  • XML Format Violation

Examples

v012xxxxdate=2022-05-31 time=17:01:25 log_id=20000029 msg_id=000004625221 device_id=FV-1KET119900275 vd="root" timezone="(GMT-8:00)Pacific Time(US&Canada)" timezone_dayst="GMTa+7" type=attack pri=alert main_type="XML Validation Violation" sub_type="XML Schema Validation Violation" trigger_policy="N/A" severity_level=Medium proto=tcp service=https/tls1.2 backend_service=unknown action=Alert policy="FWB_Policy_Default_AutoTest" src=10.0.4.13 src_port=59291 dst=10.20.4.22 dst_port=80 http_method=post http_url="/testPath" http_host="172.22.6.4:8080" http_agent="none" http_session_id=none msg="XML Schema Validation Violation : Failed to validate schema schema1.xsd. Element '{http://www.w3school.com.cn}dateborn': 'aaa' is not a valid value of the atomic type 'xs:date'." signature_subclass="N/A" signature_id="N/A" signature_cve_id="N/A" srccountry="Reserved" content_switch_name="none" server_pool_name="FWB_server_pool" false_positive_mitigation="none" user_name="Unknown" monitor_status="Disabled" http_refer="none" http_version="2.0" dev_id="none" es=0 threat_weight=25 history_threat_weight=0 threat_level=Moderate ftp_mode="N/A" ftp_cmd="N/A" cipher_suite="TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" ml_log_hmm_probability=0.000000 ml_log_sample_prob_mean=0.000000 ml_log_sample_arglen_mean=0.000000 ml_log_arglen=0 ml_svm_log_main_types=0 ml_svm_log_match_types="none" ml_svm_accuracy="none" ml_domain_index=0 ml_url_dbid=0 ml_arg_dbid=0 ml_allow_method="none" owasp_top10="A05:2021-Security Misconfiguration" bot_info="none" client_level="Unidentified" x509_cert_subject="none"