{
    "dvm_os_type": 0,
    "logdev_type": 0,
    "version": "6.2.6",
    "data": [
      {
        "address-filter": null,
        "creation-time": 1604335458,
        "description": "",
        "device": [
          {
            "id": 1,
            "name": "All_FortiGate",
            "type": 2,
            "vdom": null
          }
        ],
        "device-specify": 0,
        "email-from": "sawmill@myco.com",
        "email-html-format": 0,
        "email-subject": "MyCustomer Critical Alert",
        "email-svr": "smtp.myco.com",
        "email-to": "sawmill@myco.com",
        "enable": 1,
        "enable-time": 0,
        "fabric-connector": null,
        "filter": [
          {
            "dev-type": 0,
            "enable": 1,
            "eventstatus": "auto",
            "eventtype": "",
            "extrainfo": "",
            "extrainfo-type": 0,
            "filter-expr": "",
            "groupby1": "devid",
            "groupby2": "logdesc",
            "id": 1,
            "logtype": "event",
            "rule": [
              {
                "id": 1,
                "key": "pri",
                "oper": 2,
                "value": "2",
                "value-type": 1
                
            },
            {
              "id": 2,
              "key": "logid",
              "oper": 1,
              "value": "0100020109",
              "value-type": 0

            },
            {
              "id": 3,
              "key": "logid",
              "oper": 1,
              "value": "0100020212",
              "value-type": 0

            },
            {
              "id": 4,
              "key": "logid",
              "oper": 1,
              "value": "0100022903",
              "value-type": 0

            },
            {
              "id": 5,
              "key": "logid",
              "oper": 1,
              "value": "0100032002",
              "value-type": 0

            },
            {
              "id": 6,
              "key": "logid",
              "oper": 1,
              "value": "0100032021",
              "value-type": 0

            },
            {
              "id": 7,
              "key": "logid",
              "oper": 1,
              "value": "0100032102",
              "value-type": 0

            },
            {
              "id": 8,
              "key": "logid",
              "oper": 1,
              "value": "0100032119",
              "value-type": 0

            },
            {
              "id": 9,
              "key": "logid",
              "oper": 1,
              "value": "0100032400",
              "value-type": 0

            },
            {
              "id": 10,
              "key": "logid",
              "oper": 1,
              "value": "0100041001",
              "value-type": 0

            },
            {
              "id": 11,
              "key": "logid",
              "oper": 1,
              "value": "0101037132",
              "value-type": 0

            },
            {
              "id": 12,
              "key": "logid",
              "oper": 1,
              "value": "0101039426",
              "value-type": 0

            },
            {
              "id": 13,
              "key": "logid",
              "oper": 1,
              "value": "0104043525",
              "value-type": 0

            },
            {
              "id": 14,
              "key": "logid",
              "oper": 1,
              "value": "0109045151",
              "value-type": 0
}
],
"rule-relation": 0,
"severity": 0,
"subject": "$groupby2",
"tag": "",
"thres-count": 1,
"thres-duration": 30,
"utmevent": "_any_",
"filtercksum": -97785157
}
],
"filter-relation": 1,
"handlertype": 0,
"id": 2,
"name": "FortiOS Critical",
"protected": 0,
"target-enable": 129,
"template-url": "",
"update-time": 1604344300,
"uuid": "",
"version": 2
},
{
"address-filter": null,
"creation-time": 1604335624,
"description": "",
"device": [
{
"id": 1,
"name": "All_FortiGate",
"type": 2,
"vdom": null
}
],
"device-specify": 0,
"email-from": "sawmill@myco.com",
"email-html-format": 0,
"email-subject": "MyCustomer Alert",
"email-svr": "smtp.myco.com",
"email-to": "sawmill@myco.com",
"enable": 1,
"enable-time": 0,
"fabric-connector": null,
"filter": [
{
"dev-type": 0,
"enable": 1,
"eventstatus": "auto",
"eventtype": "",
"extrainfo": "",
"extrainfo-type": 0,
"filter-expr": "",
"groupby1": "devid",
"groupby2": "logdesc",
"id": 1,
"logtype": "event",
"rule": [
  {
    "id": 1,
    "key": "pri",
    "oper": 3,
    "value": "3",
    "value-type": 1
  },
  {
    "id": 2,
    "key": "pri",
    "oper": 2,
    "value": "4",
    "value-type": 1

            },
            {
              "id": 3,
              "key": "logid",
              "oper": 1,
              "value": "0100020085",
              "value-type": 0

            },
            {
              "id": 4,
              "key": "logid",
              "oper": 1,
              "value": "0100020099",
              "value-type": 0

            },
            {
              "id": 5,
              "key": "logid",
              "oper": 1,
              "value": "0100022113",
              "value-type": 0

            },
            {
              "id": 6,
              "key": "logid",
              "oper": 1,
              "value": "0100026001",
              "value-type": 0

            },
            {
              "id": 7,
              "key": "logid",
              "oper": 1,
              "value": "0100026003",
              "value-type": 0

            },
            {
              "id": 8,
              "key": "logid",
              "oper": 1,
              "value": "0100029021",
              "value-type": 0

            },
            {
              "id": 9,
              "key": "logid",
              "oper": 1,
              "value": "0100029022",
              "value-type": 0

            },
            {
              "id": 10,
              "key": "logid",
              "oper": 1,
              "value": "0100032029",
              "value-type": 0

            },
            {
              "id": 11,
              "key": "logid",
              "oper": 1,
              "value": "0100032029",
              "value-type": 0

            },
            {
              "id": 12,
              "key": "logid",
              "oper": 1,
              "value": "0100032042",
              "value-type": 0

            },
            {
              "id": 13,
              "key": "logid",
              "oper": 1,
              "value": "0100032043",
              "value-type": 0

            },
            {
              "id": 14,
              "key": "logid",
              "oper": 1,
              "value": "0100032247",
              "value-type": 0

            },
            {
              "id": 15,
              "key": "logid",
              "oper": 1,
              "value": "0100040704",
              "value-type": 0

            },
            {
              "id": 16,
              "key": "logid",
              "oper": 1,
              "value": "0100041006",
              "value-type": 0

            },
            {
              "id": 17,
              "key": "logid",
              "oper": 1,
              "value": "0101037122",
              "value-type": 0

            },
            {
              "id": 18,
              "key": "logid",
              "oper": 1,
              "value": "0101037124",
              "value-type": 0

            },
            {
              "id": 19,
              "key": "logid",
              "oper": 1,
              "value": "0101037128",
              "value-type": 0

            },
            {
              "id": 20,
              "key": "logid",
              "oper": 1,
              "value": "0101037129",
              "value-type": 0

            },
            {
              "id": 21,
              "key": "logid",
              "oper": 1,
              "value": "0101037130",
              "value-type": 0

            },
            {
              "id": 22,
              "key": "logid",
              "oper": 1,
              "value": "0101037131",
              "value-type": 0

            },
            {
              "id": 23,
              "key": "logid",
              "oper": 1,
              "value": "0101037133",
              "value-type": 0

            },
            {
              "id": 24,
              "key": "logid",
              "oper": 1,
              "value": "0101037135",
              "value-type": 0

            },
            {
              "id": 25,
              "key": "logid",
              "oper": 1,
              "value": "0101037136",
              "value-type": 0

            },
            {
              "id": 26,
              "key": "logid",
              "oper": 1,
              "value": "0101037139",
              "value-type": 0

            },
            {
              "id": 27,
              "key": "logid",
              "oper": 1,
              "value": "0101037141",
              "value-type": 0

            },
            {
              "id": 28,
              "key": "logid",
              "oper": 1,
              "value": "0101037188",
              "value-type": 0

            },
            {
              "id": 29,
              "key": "logid",
              "oper": 1,
              "value": "0101037192",
              "value-type": 0

            },
            {
              "id": 30,
              "key": "logid",
              "oper": 1,
              "value": "0104043573",
              "value-type": 0

            },
            {
              "id": 31,
              "key": "logid",
              "oper": 1,
              "value": "0104043575",
              "value-type": 0

            },
            {
              "id": 32,
              "key": "logid",
              "oper": 1,
              "value": "0104043576",
              "value-type": 0

            },
            {
              "id": 33,
              "key": "logid",
              "oper": 1,
              "value": "0104043579",
              "value-type": 0

            },
            {
              "id": 34,
              "key": "logid",
              "oper": 1,
              "value": "0104043580",
              "value-type": 0

            },
            {
              "id": 35,
              "key": "logid",
              "oper": 1,
              "value": "0105048013",
              "value-type": 0

            },
            {
              "id": 36,
              "key": "logid",
              "oper": 1,
              "value": "0105048038",
              "value-type": 0

            },
            {
              "id": 37,
              "key": "logid",
              "oper": 1,
              "value": "0110052000",
              "value-type": 0
}
],
"rule-relation": 0,
"severity": 1,
"subject": "$groupby2",
"tag": "System",
"thres-count": 1,
"thres-duration": 30,
"utmevent": "_any_",
"filtercksum": 532963046
}
],
"filter-relation": 1,
"handlertype": 0,
"id": 3,
"name": "FortiOS High",
"protected": 0,
"target-enable": 129,
"template-url": "",
"update-time": 1604344201,
"uuid": "",
"version": 2
}
]
}