Techincal Tip: Difference between 'Edit', 'Add' event logs generated after configuration changes of FortiGate
| Description | This article describes the difference between 'Edit', 'Add' logs generated when there are configuration changes on FortiGate. |
| Scope | FortiGate. |
| Solution | FortiGate will generate a separate entry in the logs depending on the action taken on the FortiGate.
When a new entry is created (Example: address group, policy, interface) on the FortiGate, it generates the log message starting from 'Add' as shown in the picture.
When there is changes made on the FortiGate's existing configuration firewall generates the log entry as 'Edit'. Refer to the image for more clarification.
To identify the changes made in the existing configuration, go through the details and check for the Config Attributes.
The log description will remain the same as 'Object attribute configured' for both types of logs.
Relate article: |
