fortinet utm

Expression

product = fortinet utm

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
alert-trigger	src_ip	Legacy	✓	✓
	src_port	Legacy			✓
	protocol	Legacy		✓
	additional_info
	dest_ip	Legacy	✓	✓
	local_user_name
	action	Legacy			✓
	src_host	Legacy	✓	✓
	user	Legacy		✓
	dest_port	Legacy		✓
	target
app-activity	src_ip	Default		✓
	src_port	Default			✓
	web_domain	Default			✓
	dest_ip	Default		✓
	event_name	Default			✓
	event_subtype	Default			✓
	category	Default			✓
	user	Default	✓	✓
	auth_server	Default			✓
	uri	Default			✓
	dest_port	Default			✓
endpoint-authentication	src_ip	Default		✓
	dest_ip	Default		✓
http-request	app	Default			✓
	additional_info	Default			✓
	service_name	Default			✓
	event_name	Default			✓
	event_subtype	Default			✓
	operation	Default			✓
	auth_server	Default			✓
http-session	policy_id	Default			✓
	group_name	Default			✓
	additional_info	Default			✓