10000017
Meaning | |
---|---|
Someone attempted to log in to a FortiWeb administrator account, successfully or failed. |
Field name | Description |
ID ( |
See Log ID numbers. |
Sub Type ( |
See Subtypes. |
Level ( |
See Priority level. |
User ( |
<administrator_name>
|
User Interface ( |
{GUI(<mgmt_ip>) | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console}
|
Action ( |
login
|
Status ( |
failure | success
|
Message ( |
User <administrator_name> login failed from {GUI(<mgmt_ip>) | telnet(<mgmt_ip>) | ssh(<mgmt_ip>) | console} |
Examples | |
---|---|
2023-03-13T17:53:18.818570+08:00 10.20.128.44 date=2023-03-13 time=00:27:21 log_id=10000017 msg_id=000004513309 device_id=FVVM02TM22001887 vd="root" timezone="(GMT-8:00)Pacific Time(US&Canada)" timezone_dayst="GMT+8" type=event subtype="system" pri=alert trigger_policy="N/A" user=admin ui=GUI action=login status=failure msg="User admin login failed from GUI->HTTPS(172.23.132.33)" 2023-03-13T17:53:21.419753+08:00 10.20.128.44 date=2023-03-13 time=00:27:24 log_id=10000017 msg_id=000004513310 device_id=FVVM02TM22001887 vd="root" timezone="(GMT-8:00)Pacific Time(US&Canada)" timezone_dayst="GMT+8" type=event subtype="system" pri=information trigger_policy="N/A" user=admin ui=GUI action=login status=success msg="User admin logged in successfully from GUI->HTTPS(172.23.132.33)" |