What activities are specifically logged under User Events in FortiSASE?

In FortiSASE, User Events specifically focus on activities that relate to user account management within the system. This encompasses actions such as the creation of new accounts, modifications to existing accounts, and the deletion of accounts. These events are critical for maintaining security and compliance as they allow administrators to track who has access to the system, when those accounts were created or modified, and any potential unauthorized changes.

While network traffic monitoring, system performance metrics, and malware detection incidents are essential aspects of security infrastructure and are logged elsewhere, they do not fall under the User Events category. User Events are distinctly centered on user account statuses and actions rather than broader system activities or performance considerations. This focus ensures that any administrative actions concerning user accounts are recorded for accountability and audit purposes.