E-mail-alert-when-WAN-interface-went-down, help

Forum|Forum|2 years ago
January 15, 2024
6 replies
5982 views

Hi all ¡¡ I'm trying to configure an email alert when WAN2 interface from my fortigate with 7.0.11 goes dow, but its not working. Probably I'm forgetting some steps or doing something wrong.

This is the article:

Technical Tip: E-mail alert when WAN interface wen... - Fortinet Community

I attach you my trigger, action and stich. I have tried it using the LOG ID 22922 as in the example. Cause it doesn't work I've noticed that the event ID changes in my FW (I attach you an image). I've changed it.

Finally I attach you my mail server configuration (default configuration).

What am I doing wrong? The mail doesn't arrive (I've checked the spam folder).

log ID.JPG mail server.JPG

Thanks ¡¡

FortiGate

Best answer by hbac

Hi @fortimaster,

You Field filter is wrong. Please try the following and test again.

config system automation-trigger
edit "Link wan down"
set event-type event-log
set logid 20099
config fields
edit 1
set name "Message"
set value "Link monitor: Interface wan2 was turned down"
next
end
next
end

Regards,

AEK

SuperUser

Hi FortiMaster

Did you test your mail configuration?

diagnose log alertmail test

If you don't receive a test mail then you have first to fix your mail configuration.

AEK

fortimasterAuthor

Explorer III

Thanks for your help.

Initially, the test mail didn't work. If I configure this it works:

config alertemail setting

set username "test@test.es"
set mailto1 "testmail1@hotmail.com"

I've received a mail with "empty body":

Alert Mail Test
Message body (log level = 1):
1st Line
2nd Line
(2024-01-15 22:21:03)

But the automation stitch doesn't send mail. It has 0 trigger count and with a debug to check the sent mails I can see that the FW doesn't send mail when I turn down the interface.

Maybe cause I turn it downs manually?

Thanks ¡¡

fortimasterAuthor

Explorer III

Solved ¡¡

It didn't works cause the interface filter was wrong. If I delete in the automation-trigger filter "wan2" it works perfectly. I don't know the cause, but I'm not worried cause I want to "monitorice" all interfaces.

The alertmail settings are not needed (its needed to test mail). Thanks for your help ¡¡¡

hbacAnswer

Staff

Hi @fortimaster,

You Field filter is wrong. Please try the following and test again.

config system automation-trigger
edit "Link wan down"
set event-type event-log
set logid 20099
config fields
edit 1
set name "Message"
set value "Link monitor: Interface wan2 was turned down"
next
end
next
end

Regards,