FortiSIEM Discussions
JustinHarper
New Contributor

Event Attributes

I am investigating an event that has occurred. In the event details it shows a source user and a user. Can someone explain what a source user is and how it is different from a user. Also, is there any documentation available that describes what each event attribute means.
1 REPLY 1
DanielHanman
Staff
Staff

Hi Justin,

Can you provide a copy of the event? Obfuscate fields as needed.

What device is the event from?

Thanks
-------------------------------------------
Original Message:
Sent: 11-26-2019 10:48
From: Justin Harper
Subject: Event Attributes

I am investigating an event that has occurred. In the event details it shows a source user and a user. Can someone explain what a source user is and how it is different from a user. Also, is there any documentation available that describes what each event attribute means.
Announcements

Welcome to your new Fortinet Community!

You'll find your previous forum posts under "Forums"