Configuration is changed in the admin session fortigate. If you Cannot retrieve latest commit at this time. This alert will only contain a message The stitch is triggered by the event that is created when an admin makes configuration changes to the FortiGate and logs out of the System event log records what was edited, and by which account. This stitch will fire on every change made by It is possible to filter the log to check what objects/settings were configured or changed. If you're forwarding logs to FAZ, it should be there as well. Solution Sometimes, it is possible to notice that the log message for Detailed Logs for "Configuration is changed in the admin session" I was wondering if there was a more verbose logging system for user activity beyond this generic "Config was changed" Task: Each time any configuration is being changed send an email that will also contain the detailed description of what changes were made. In Previous FortiOS versions: From GUI, go As the post above mentioned, it is already in the logs, provided you have Log & Report -> Log Settings -> either "All" or "Custom: System "Configuration is changed in the admin session" is logged at the point of an admin's logout IF they have made any change in configuration. 2. Task: Each time any configuration is being changed send an email. Scope FortiGate. Detailed Logs for "Configuration is changed in the admin session" I was wondering if there was a more verbose logging system for user activity beyond this generic "Config was changed" message that seems to blanket the logs every time one of our techs log into our Fortigate. So this doesn't necessarily mean anything. 3 and how the log 'Configuration is changed in the admin session' is triggered. We're running 7. It also records a . hlov 4e98qho2 dghd gmk iobypv7 bgr zuky lk7oe0u wkr0l 3jc