Specific fields

The logs “l_server”, “l_auth”, “l_vpn” and “l_system” contain fields that are specific to Stormshield Network firewalls.

These special fields, which are not in WELF format, are described below:

fw

Firewall ID. This is the name entered by the administrator or, by default, its serial number.
String of characters in UTF-8 format.
Example: “firewall_name” or “V50XXXXXXXXXXXX”
Available from: v1.0.0 SNS

Affected logs: l_alarm, l_auth, l_connection, l_count, l_date, l_filter, l_filterstat, l_ftp, l_monitor, l_plugin, l_pop3, l_pvm, l_sandboxing, l_server, l_smtp, l_ssl, l_system, l_vpn, l_web, l_xvpn and l_routerstat, l_dmrouting.
startime

"Local" time at the beginning of the logged event (time configured on the firewall).
String in “YYYY-MM-DD HH:MM:SS” format.
Available from: v1.0.0 SNS

Affected logs: l_alarm, l_auth, l_connection, l_count, l_date, l_filter, l_filterstat, l_ftp, l_monitor, l_plugin, l_pop3, l_pvm, l_sandboxing, l_server, l_smtp, l_ssl, l_system, l_vpn, l_web, l_xvpn and l_routerstat, l_dmrouting, l_routing.
Date and time
The display format depends on the language of the operating system on which the administration suite has been installed. Example: "DD/MM/YYYY" and "HH:MM:SS" for French; "YYYY/MM/DD" and "HH:MM:SS" for English.
time

"Local" time at which the log was recorded in the log file (time configured on the firewall).
String in “YYYY-MM-DD HH:MM:SS” format.
Available from: v1.0.0 SNS

Affected logs: l_alarm, l_auth, l_connection, l_count, l_date, l_filter, l_filterstat, l_ftp, l_monitor, l_plugin, l_pop3, l_pvm, l_sandboxing, l_server, l_smtp, l_ssl, l_system, l_vpn, l_web, l_xvpn and l_routerstat, l_dmrouting, l_routing.
Saved at
The display format depends on the language of the operating system on which the administration suite has been installed. Example: "DD/MM/YYYY" and "HH:MM:SS" for French; "YYYY/MM/DD" and "HH:MM:SS" for English.
tz

Time difference between the firewall’s time and GMT. This depends on the time zone used.
String in “+HHMM” or “-HHMM” format.
Available from: v1.0.0 SNS

Affected logs: l_alarm, l_auth, l_connection, l_count, l_date, l_filter, l_filterstat, l_ftp, l_monitor, l_plugin, l_pop3, l_pvm, l_sandboxing, l_server, l_smtp, l_ssl, l_system, l_vpn, l_web, l_xvpn and l_routerstat, l_dmrouting, l_routing.
Time difference between local time and GMT time
Example: "gmt +01:00"