Skip to main content
rstuart
New Member
July 29, 2016
Question

FAZ 5.4.0 - event alert on memory usage of a FortiGate

  • July 29, 2016
  • 3 replies
  • 11777 views

Is there a way to create an event alert when the memory on a FortiGate goes above say 80%?  I see Performance statistics in the System Event logs with a field called Memory and a value.  However, when creating an event alert, I can't figure out how to query on this field.  ideas?

Thanks.

-Robin-

    3 replies

    Ahslan
    New Member
    August 1, 2016

    I use the below settings to get an email alert when memory is greater than 70% (so that I get an alert before the fortigate goes into conserve mode). Hope it helps.

     

    Log Type: Event Log

    Event Category:  System 

    Group By: Device ID

    Logs match: All

     

    Log Field: Level

    Match Criteria: Equal To

    Value: Notice

     

    Generic Text Filter: mem>70

     

    rstuart
    rstuartAuthor
    New Member
    August 24, 2016

    I've added the event and will see what I get. 

    Thank you Ahslan for your response - much appreciated!

    sotir1984
    New Member
    January 31, 2018

    Hi Ashlan,

     

    This works great. 

     

    Kind regards,

     

    -1984-

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!