Description
This article describes generating email alerts for a single CPU core spike.
Scope
FortiGate.
Solution
Refer below steps to configure the automation stitch for generating mail alerts for a single CPU core spike.
- Navigate Security Fabric and select Automation.
-
Select Create New to create a new automation stitch.
-
Configure the Name and enable the status.
-
Select Add Trigger to configure the trigger condition and then select Create New and then FortiOS Event Logs.
-
Configure the Name, select FortiOS Event ID: 40707, and select OK.
-
Once Automation Trigger is configured, apply the object to Trigger.
-
Select Add Action and New or select an existing email notification action.
-
After selecting New, select the Email option from the notification.
-
Configure the fields Name, From, To, and select OK.
-
Select OK.
Make sure the below command is enabled to log the event. Any single CPU core usage above the CPU usage threshold will report an event log.
config system global
set log-single-cpu-high enable
end
To make sure that the email daemon is working as expected, a test log email alert can be generated using the command: diagnose log alertmail test.
Related article:
