Fortigate logs meaning || incident serial no in CLI ||

[Umesh]

Dear All,

I was trying to understand fortigate logs and came across incident serial no in logs.

Can anyone make me understand what the meaning is - incident serial no and when it is identified.

Also I would like to request you please share any article where I can understand logs by CLI 

[nweckel]

HI Umesh,

When checking IPS logs, you will have the "attack ID" which is the identification number of that signature. You can find further information related to that signature on FortiGuard.

The "Incident serial No" is the identification number of that particular event.

More information about logs can be found in the following Fortinet OS documentation: https://docs.fortinet.com/document/fortigate/7.4.1/fortios-log-message-reference