Skip to main content
Marcos_FDS1012
New Member
August 5, 2024
Solved

They receive a message which link is down

  • August 5, 2024
  • 2 replies
  • 1259 views

I made a configuration to receive an e-mail message when my link goes down, but I would like to know which link went down, I'm using event 20099, I tried to configure event 20090 but I don't receive an e-mail.
Is there any way to receive the name of the dropped link or interface?

Best answer by pmeet

Hello @Marcos_FDS1012 ,

 

There won't be a different event ID based on different interface, You should be able to see in the email in the raw log which interface was down

 

date=2024-08-05 time=11:11:08 eventtime=1722870669172337133 tz="-0400" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="DOWN" msg="Link monitor: Interface internal7 was turned down"

2 replies

pmeet
Staff
pmeetAnswer
Staff
August 5, 2024

Hello @Marcos_FDS1012 ,

 

There won't be a different event ID based on different interface, You should be able to see in the email in the raw log which interface was down

 

date=2024-08-05 time=11:11:08 eventtime=1722870669172337133 tz="-0400" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="DOWN" msg="Link monitor: Interface internal7 was turned down"

patelr
Staff
Staff
August 5, 2024

Hello @Marcos_FDS1012,

 

Please review https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-an-automation-stitch-to-get-an/ta-p/194017 and https://community.fortinet.com/t5/FortiGate/Technical-Tip-Automation-stitch-test-related-to-event-log/ta-p/213521 for further clarification on how to configure an automation stitch using a specific event log ID from the Logs on FortiGate.

 

Thanks, 
Ronak Patel

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!