Skip to main content
StevenT
Explorer II
October 3, 2023
Solved

CPU and Memory usage at 50% threshold with email alert

  • October 3, 2023
  • 7 replies
  • 5172 views

Hi All,

 

I had found the CPU threshold and its alert but for the memory.

I had found a few but did not understand this trigger event in the automation for memory.

 

Automation > Trigger

memory conserve mode entered memory conserve mode exited

What is this 2 event log and what does it do?

 

And for the below threshold percentage, once we had configured it. How do we set the email alert under the automation for IF the memory threshold hit 50% and email alert.

I using this guide: https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/194558

 

config system global     set memory-use-threshold-extreme <integer>     set memory-use-threshold-green <integer>     set memory-use-threshold-red <integer> end 

 

 

Best answer by asengar

Hi @StevenT 

Thanks for posting your query.

I can see you wanted to configure an automation stitch for the conserve mode issue.

As per the above share configuration you can set the threshold values for the memory, refer the below document for the default setting.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-conserve-mode-is-triggered/ta-p/198580?externalID=FD33103

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Execute-a-CLI-script-based-on-HIGH-memory/ta-p/197758

 

Find the below document to configure the automation stitch for the conserve mode issue

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Automation-stitch-for-conserve-mode/ta-p/240696

 

I hope it will help you clear your queries.

 

Regards

7 replies

srajeswaran
Staff
Staff
October 3, 2023

Email alerts configuration is explained in following article - https://community.fortinet.com/t5/FortiGate/Technical-Tip-Use-FortiGate-automation-stitches-for-alert-emails/ta-p/193355

Regarding the "memory conserve mode entered", these events are generated when the system enters the memory usage above the value specified under "memory-use-threshold-red <integer>".

And "memory conserve mode exited" is generated when the memory usage falls below the value configured under "set memory-use-threshold-green <integer>".

 

In general, 50% looks very aggressive. I would suggest you monitor the memory usage value for a longer period (may be last couple of months) to understand whats the normal value and then configure the thresholds.

StevenT
StevenTAuthor
Explorer II
October 3, 2023

Thank you for the immediate assistance. I will try it out in our lab with those articles and do a network stress test on the FortiGate as a simulation.

srajeswaran
Staff
Staff
October 3, 2023

That's a very good option before applying the changed on production firewalls.

asengar
Staff
asengarAnswer
Staff
October 3, 2023

Hi @StevenT 

Thanks for posting your query.

I can see you wanted to configure an automation stitch for the conserve mode issue.

As per the above share configuration you can set the threshold values for the memory, refer the below document for the default setting.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-conserve-mode-is-triggered/ta-p/198580?externalID=FD33103

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Execute-a-CLI-script-based-on-HIGH-memory/ta-p/197758

 

Find the below document to configure the automation stitch for the conserve mode issue

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Automation-stitch-for-conserve-mode/ta-p/240696

 

I hope it will help you clear your queries.

 

Regards

StevenT
StevenTAuthor
Explorer II
October 4, 2023

One more question.

 

The set cpu threshold in the config sys global. Does the threshold refer to the individual core CPU or the Overall Core CPU?

srajeswaran
Staff
Staff
October 4, 2023

Its the average CPU usage of all cores.

StevenT
StevenTAuthor
Explorer II
October 5, 2023

Thank you

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!