Update Hit Counters

1 reply
171 views

Hello, is there a way to bulk update Hit Counters on Fortimanager for all or selected Fortigates?

I mean trough a Script in "Device Manger" - "Scripts" and schedule it on a ex. daily basis?

I do not need the Hit Counters containing the last few minutes, it would be sufficient if i reset Policies in a Policyblock and on next Workday i can see which policies are used without Clicking "Retrieve Hit Counts" and wait until it is updated.

Fortimanager

ede_pfau

SuperUser

IMHO you have 2 choices:

1- make the 'last used' column visible, sort and only look at the top-most policies

2- run a script periodically (i.e. each day at midnight) and use the CLI command to clear the hit counters:

diagnose firewall iprope clear 100004

which clears counters of ALL policies, or

diagnose firewall iprope clear 100004 69 117 404

which clears counters of policies with ID 69, 117, 404.

(shamelessly copied from KB article 198251 Technical-Tip How to clear or reset policy counters on the firewall Policy via CLI )

Script automation if found in the menu 'Security Fabric'/'Automation'.

Sign up

Login with SSO

Login to the community

Login with SSO