Performance SLA and reporting

Hello Timsellis, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

Hello Timsellis,

I found this solution. Can you tell us if it helps, please?

To achieve the desired report on FortiAnalyzer, you need to ensure that the necessary configurations are in place on your FortiGate and FortiAnalyzer. Here’s a step-by-step guide:

1. Configure SLA Logging on FortiGate: Ensure that SLA logging is enabled on FortiGate health checks and applied to SD-WAN rules. This involves setting the `sla-fail-log-period` and `sla-pass-log-period` in the SD-WAN health-check configuration.
   
   
2. Verify SD-WAN Configuration:
   - Ensure that SD-WAN rules specify the source address along with the protocol number, internet service, or application.
   - Confirm that SD-WAN interface members are configured with the 'WAN' role and 'Estimated bandwidth'.
   - Ensure that the firewall policy with the SD-WAN interface logs all sessions.
   
   
3. Check Traffic Flow: Verify that traffic is passing through the SD-WAN rules by checking the FortiGate SD-WAN rules hit count.
   
   
4. Log Collection on FortiAnalyzer: Ensure that FortiAnalyzer is receiving health check SLA status logs. You can verify this under `Logview -> Event -> SD-WAN`.
   
   
5. Generate Reports:
   - Once FortiAnalyzer is receiving the logs, use the Secure SD-WAN monitor to view the device list with data present in each widget.
   - For specific SLA breach reports, you may need to create a custom report or use the existing report templates and modify them to focus on SLA breaches.

If the out-of-the-box reports do not meet your specific needs, consider creating a custom report on FortiAnalyzer that filters and displays only the SLA breaches according to your criteria.