This value carries a numeric code identifying the specific category of event that triggered a Fortinet trap notification, covering a broad range of conditions from interface link changes and high CPU usage to VPN tunnel status changes and detected viruses. Administrators use this code, interpreted alongside the accompanying trap description, to programmatically categorize and route incoming FortiGate alerts to the right response workflow. For example, a trap carrying the value 601 (virus-detected) would tell a monitoring system to route this alert to the security team rather than the network operations team handling a value like 101 (cpu-usage-high).