FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
hst1
Staff
Staff
Article Id 395380
Description This article describes the behavior of SD-WAN performance SLA logs.
Scope FortiGate v7.2.3 and onwards.
Solution

Before v7.2.3, FortiGate by default generates SD-WAN pass and fail logs along with the packet loss, jitter, and latency information once the target SLA is enabled; however, starting from v7.2.3 onwards target SLA is not needed to send the real-time SD-WAN logs to the syslog server or FortiAnalyzer.

 

To configure the SD-WAN performance target SLA as per the screenshot below, the logs have to be forwarded to the syslog server or FortiAnalyzer.

 

Screenshot 2025-06-08 111942.png

 

The SD-WAN logs get generated at the interval of time that is specified in the performance SLA configuration.

 

To configure the pass-fail log time interval via CLI in the SD-WAN configuration: 

 

config system SDWAN 

    config health check.

        edit "Test Server"

            set sla-fail-log-period 30           <----- Fail log interval.
            set sla-pass-log-period 30           <----- Pass log interval.

        next
    end

 

SD-WAN pass logs:

 

date=2025-06-06 time=21:23:27 eventtime=1749245007370203780 logid="0113022925" type="event" subtype="sdwan" level="information" vd="root" logdesc="SDWAN SLA information" eventtype="SLA" healthcheck="Test Server" interface="port1" status="up" latency="2.674" jitter="0.021" packetloss="0.000" moscodec="g711" mosvalue="4.403" inbandwidthavailable="10.00Gbps" outbandwidthavailable="10.00Gbps" bibandwidthavailable="20.00Gbps" inbandwidthused="0kbps" outbandwidthused="43kbps" bibandwidthused="43kbps" slamap="0x0" msg="Health Check SLA status."

 

 

SD-WAN fail logs: 

 

date=2025-06-06 time=21:23:27 eventtime=1749245007370203813 logid="0113022933" type="event" subtype="sdwan" level="information" vd="root" logdesc="SDWAN SLA information" eventtype="SLA" healthcheck="Test Server" interface="port3" status="down" latency="0.00" jitter="0.000" packetloss="100.000" moscodec="g711" mosvalue="0.000" inbandwidthavailable="10.00Gbps" outbandwidthavailable="10.00Gbps" bibandwidthavailable="20.00Gbps" inbandwidthused="0kbps" outbandwidthused="43kbps" bibandwidthused="43kbps" slamap="0x0" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold."

Contributors