Refer to the exhibit, which shows a revision history window in the FortiManager device layer.

This retrieved process was automatically triggered by a Remote FortiGate Directly (via CLI) script.

The user script_manager is an API user from the Fortinet Developer Network (FDN) retrieving a configuration.

To identify the user who created the event, check it on the Configuration and Installation widget on FortiGate within the FortiManager device layer.

Find the user in the FortiManager system logs and use the type=script command to find the administrator user in the user field.