Technical Tip: Automate the manual sync for the High Availability (HA) cluster using an automation stitch when HA out of sync is observed

[Umer221]

Description	This article describes how to automate the manual synchronization of a High Availability (HA) cluster by using an automation stitch. This ensures that whenever HA out of sync is detected, the system automatically runs a manual sync using a CLI Script.
Scope	FortiGate, High Availability, Automation Stitches
Solution	Note: This solution is not a replacement for investigating the root cause of why the FortiGate is going out of sync. The underlying issue should still be thoroughly examined. When an HA cluster is out of sync, it displays the following behavior, as shown below: In such a case, a manual sync can be used to keep the HA synchronized. This can be automated using an automation stitch that runs as soon as an alert is triggered indicating HA is out of sync. Create a New Automation Stitch Go to Security Fabric -> Automation -> Create New. Name the automation stitch appropriately. Add a Trigger: In the Stitch section, select Add Trigger. Select 'Create' to define the trigger. Select 'FortiOS Event Log': In the list of available triggers, select FortiOS Event Log. Define the Trigger Based on the Event Log: Set the event type to HA synchronization failed. Specify the relevant log ID (LOG_ID_HA_SYNC_FAIL) and ensure it matches the exact failure conditions. Confirm Trigger Selection: Once the trigger is defined, select the newly created HA out of Sync trigger. Add an Action In the Stitch section, select Add Action. Select Create to set up the corresponding action.   Select 'CLI Script': From the list of available actions, choose CLI Script to execute commands automatically when the trigger is fired. Complete CLI Script Configuration Input the necessary CLI commands to synchronize the HA cluster:     Select the Action Once the CLI script is configured, select the action from the list to complete the automation stitch.   Note: The above automation script needs to be configured on both the FortiGate in the HA cluster, for both the FortiGate to be able to run the script individually. Once this configuration process is complete, the system will automatically run the manual synchronization script when the HA cluster goes out of sync, ensuring minimal manual intervention. Related documents: Creating automation stitches Use FortiGate automation stitches for alert emails Procedure for HA manual synchronization How to troubleshoot HA synchronization issue using GUI FortiGate HA synchronization messages and cluster verification steps