Which log subtype contains information related to FortiGate management IPs and GUI connections?

The local log is where information related to FortiGate management IPs and GUI connections is stored. This log subtype is specifically designed to capture events occurring within the FortiGate device itself. It retains detailed information on various activities, including management access and system events, allowing administrators to track and analyze GUI connections as well as IP addresses that are managing the FortiGate unit.

In contrast, the forward log is used to send log data to an external logging device or system for centralized logging and further analysis. It does not maintain information locally regarding management connections. The sniffer log is more focused on capturing raw packet data for analysis, which is useful for troubleshooting but not for logging configuration or management information. The event log may encompass a wider array of events but does not specifically detail management IPs or GUI connection information as thoroughly as the local log does.