Skip to main content
ICT_Putte
ICT_Putte
Explorer
October 20, 2022
Solved

how to reset hit counts for SD-WAN rules?

  • October 20, 2022
  • 3 replies
  • 5069 views

We are using a Fortigate 100F with firmware 7.2.2. 

 

Is there a way to reset the hit counts for specific SD-WAN rules? 

 

After some searching in the guides and the forum I found info to reset the hit counts for the policy rules but uptil now no luck in resetting the hit counts for the SD-WAN rules.

 

Can some of the guru's here help me or point me in the right direction? 

 

Thanks in advance

Best answer by aionescu

Hi @ICT_Putte ,

 

Welcome to the community.

Can you, please, try  diag firewall proute list  and then   clear hit_count using the policy route ID from ‘proute list’ ?

 

3 replies

aionescu
Staff
aionescuAnswer
Staff
October 20, 2022

Hi @ICT_Putte ,

 

Welcome to the community.

Can you, please, try  diag firewall proute list  and then   clear hit_count using the policy route ID from ‘proute list’ ?

 

    sagha
    Staff
    sagha
    Staff
    October 20, 2022

    Hi @ICT_Putte , 

     

    Here are the steps: 

     

    1. Run the command 'diag firewall proute list '

     

    2. Look for the relevant sdwan rule:

     

    id=2130706435(0x7f000003) vwl_service=3(test)
    source(1): 0.0.0.0-255.255.255.255
    destination(1): 0.0.0.0-255.255.255.255
    hit_count=179316 last_used=2022-10-20 13:04:57

     

    3. Run the following command: 

    2130706435 is id for this sdwan rule

     

    diagnose firewall proute clear 2130706435

     

    4. Result: 

     

    id=2130706435(0x7f000003) vwl_service=3(test)
    source(1): 0.0.0.0-255.255.255.255
    destination(1): 0.0.0.0-255.255.255.255
    hit_count=0 last_used=2022-10-20 13:05:58

     

    Hope this helps. 

     

    Thank you. 

    Shahan

      ICT_Putte
      ICT_PutteAuthor
      Explorer
      October 20, 2022

      Hi @aionescu and @sagha 

       

      Thanks for the info. With it I managed to clear the hit count.

       

      I noticed some strange behaviour thou (maybe a bug in the firmware version I'm using?):

       

      When I used the command with a specific id of a sdwan rule it didn't work.

      'diag firewall proute clear <id nummer> ' didn't gave an error but it also didn't clean the hit count.

      If I gave the same command without the id nummer it cleared all the hitcounts of all the rules (as expected).

       

      The firmware I'm using v7.2.2 build 1255.

       

      With kind regards.

       

      Terms & ConditionsAccessibility statement