Technical Tip: Difference between 'age' and 'live' fields in rogue FortiAP detect log
Description
When a rogue FortiAP event is generated, it shows 'age' and 'live' fields.
This article describes the difference between both.
Solution
The description of various log fields for the logs generated on FortiGate are available in the below link.
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/be7c8196-1320-11eb-96b9-00505692583a/FortiOS_6.4.3_Log_Reference.pdf
age: the time passed since managed FortiAPs see the rogue last time.
live: the time passed since managed FortiAPs see the rogue first time.
When a rogue FortiAP event is generated, it shows 'age' and 'live' fields.
This article describes the difference between both.
Solution
The description of various log fields for the logs generated on FortiGate are available in the below link.
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/be7c8196-1320-11eb-96b9-00505692583a/FortiOS_6.4.3_Log_Reference.pdf
age: the time passed since managed FortiAPs see the rogue last time.
live: the time passed since managed FortiAPs see the rogue first time.