Technical Tip: How to configure Event Handler Alerts, specifcally to Jitter SD-WAN

[Pedro_FTNT]

Description	This article describes how to configure Event Handler Alerts to JITTER SD-WAN.
Scope	FortiAnalyzer, FortiSoC, SD-WAN, Event Handler.
Solution	To configure Handler: Go to FortiAnalyzer -> FortiSoC -> Handlers -> Data Selector List and select 'Create New'. Set Name. Select Device or Devices. Go to FortiSoC -> Handlers -> Notification Profile List and select 'Create New'. Complete data. To configure the Mail Server refer: Mail Server   Go to FortiSoC -> Handlers -> Event Handler List and select 'Create New'. Select Status Enable. Set Name. Select Data Selector. Configure Rules. Set Notifications profile. Rules Configuration to SDWAN JITTER: fail and recovery sequence. Service prioritized by performance. metric="jitter" and msg='Service prioritized by performance metric will be redirected in sequence order'. Stop forwarding traffic. subtype=="sdwan" AND metric=="jitter" AND msg~"Stop forwarding traffic." Start forwarding traffic. subtype=="sdwan" AND metric=="jitter" AND msg~"Start forwarding traffic." Mail Alerts received: Start forwarding traffic. Service prioritized by performance. Stop forwarding traffic. Debug on the FortiAnalyzer: The following commands on the FortiAnalyzer will provide more information regarding the SMTP client application. For FortiAnalyzer 7.6 or above, perform a flow capture: diagnose debug application fazmaild 8 diagnose debug timestamp enable diagnose debug enable Related articles: Understanding SD-WAN related logs Troubleshooting Tip: How to troubleshoot for event handler related issues FortiAnalyzer Administration Guide Mail Server