Technical Tip: How to get a consolidated view of admin logins and configuration changes.

It is crucial to review the below points to maintain the security posture of the FortiGate device during a security audit 

1. Audit Admin Activity: The top Admin logins dashboard provides the change logs performed by a specific admin along with the duration of login.
2. Login Status: It also provides the  number of successful and failed logins performed by the specific admin

Navigate to Dashboard -> Top Admin Logins:

Select admin user with configuration changes will provide details about the performed configuration during the specific duration:

The above logs can also be reviewed over the system event logs but the top Admin login dashboard provides a consolidated view with a focus on specific users.

Related article:

Technical Tip: How to Audit logs of admin users on FortiGate