Skip to main content
it-sinardigitaln
New Member
October 24, 2025
Solved

Forti 60F: How can I trigger a webhook when a specific IP stops replying to ping?

  • October 24, 2025
  • 1 reply
  • 292 views

Body
Hi everyone,

Goal
I want my FortiGate 60F to continuously ping a specific host, for example 172.16.23.254. If it stops replying, I need FortiGate to trigger a webhook that will notify a Telegram group. The Telegram webhook side is already working, so I only need help with the FortiGate trigger.

Environment

  • Model: FortiGate 60F

  • FortiOS: 7.4.8

  • Target to monitor: 172.16.23.254

  • The target is on LAN, reachable via interface: internal4

What I have working

  • A webhook action that successfully sends a message to my Telegram bot when manually tested.

What I am trying to achieve on FortiGate

  1. Set up a reliable ICMP probe to 172.16.23.254

  2. Generate a log event when the host is considered down, and again when it recovers

  3. Use an Automation Stitch to catch that event and call the webhook

Questions

  1. What is the best practice approach for my case?

Desired outcome

  • When 172.16.23.254 fails ICMP for N consecutive probes, FortiGate sends a webhook to Telegram with a short message that includes the host, status, and time.

  • When it recovers, FortiGate sends a recovery message.

If sample config helps, here is the intent

  • Monitor 172.17.23.254 with ICMP from the correct interface

  • Log up and down state changes

  • Automation Stitch with Event Log trigger that calls my webhook action

If you could share the recommended feature choice, logging settings, and a clean example of the Automation Stitch trigger filter, I would really appreciate it. A minimal CLI or GUI path would be perfect.

Thanks in advance.

Best answer by funkylicious

hi,

try setting a link monitor for this.

you can find more info about it, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Link-Monitor-Explained/ta-p/197504 

1 reply

funkylicious
SuperUser
SuperUser
October 24, 2025

hi,

try setting a link monitor for this.

you can find more info about it, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Link-Monitor-Explained/ta-p/197504 

"jack of all trades, master of none"
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!