Technical Tip: How to configure CLI traceroute action with email output when SD-WAN member out of SLA

Create the trigger based on the SDWAN event log: Go to Security Fabric -> Automation select Trigger, and Create New Miscellaneous: FortiOS Event Log.

The trigger event is based on logid 22923:

Here are the 2 triggers with filters:

If there is no VDOM enabled on FortiGate, the filter vd: root is not required.

After that, create the action:
The first action is under the CLI command to execute the traceroute:

If there is no VDOM enabled on FortiGate,'config vdom' and 'edit root' are not required.

Second action is to email the output to recipients:

Email body change to %%results%%. Repeat the same actions for another SD-WAN member port1.

Create a stitch to add the trigger and action together.

The trigger count will show how many times it is being executed.

An email of the output will be sent to the recipient:

Related documents: 

Automation stitches