[FORTINET] UTM Anomaly Event Detected

alert any $HOME_NET any -> $HOME_NET any (msg:"[FORTINET] UTM Anomaly Event Detected"; content:" type=
| 22
| utm
| 22
| "; content:" subtype=
| 22
| anomaly
| 22
| "; content:"severity=critical"; content:!"level=
| 22
| notice
| 22
| "; content:!"policytype=
| 22
| DoS-policy
| 22
| "; parse_src_ip:1; content:!"- - - -"; classtype:system-event; reference:url,https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/efa7b0eb-45bc-11ee-8e6d-fa163e15d75b/FortiOS_7.4.1_Log_Reference.pdf; sid:5014343; rev:1;)