Technical Tip: How to configure Email Notifications for backup SFTP connections failure

1. Enable FortiAnalyzer Features or configure FortiManager to send logs to FortiAnalyzer: Technical Tip: How to send local FortiManager logs to a FortiAnalyzer.
2. Configure schedule backup by following the KB article: Technical Tip: How to send automatic and scheduled system backup configuration.
3. Configure Mail Server under FortiAnalyzer -> System setting -> Advanced -> Mail server -> select 'Create new' -> Enter the mail server details.

4. Navigate to Incidents -> Events -> Handlers -> Notification Profiles -> select 'Create New'. Enter the name for the notification profiles and enable 'Send Alert Email'. Configure the details, and for 'Email Server', can just choose the Mail Server created in step 2.

5. Navigate under Incidents -> Events -> Handlers -> Basic Handlers -> Select 'Create New'. Fill in the Name of the Handler and Notifications and choose the Notification Profile created in Step 3.

Select 'Add New Rule', configure the following settings:

• Name:
  • Log Device Type: FortiAnalyzer.
  • Log Type: Event Log (event).
  • Log Field: Message (msg).
  • Log Filter by Text: msg=="Backup all settings failed (upload failed)".

Note:

Analyzing raw logs will provide a better understanding of creating specific event handlers.

Related article:

Technical Tip: How to send automatic and scheduled system backup configuration