Created on
09-13-2023
11:57 PM
Edited on
07-24-2025
12:31 AM
By
Jean-Philippe_P
Description | This article describes that by default, FortiGate does not log the SLA health check and how to configure the SLA logging. |
Scope | FortiGate, FortiAIOps v7. |
Solution |
Here is the config example:
config sys sdwan config health-check edit <Performance SLA Name> set sla-fail-log-period <x> set sla-pass-log-period <y> end end
For example:
config sys sdwan (sdwan) # config health-check (health-check) # edit SLA (SLA) # set sla-fail-log-period 30 (SLA) # set sla-pass-log-period 30 (SLA) # end
Once configured, FortiGate will store the SLA information at the frequency defined in the configuration.
FortiGate will keep the logs for 10 minutes. For longer retention, there should be an external storage like FortiAnalyzer. The generated logs sent to FortiAnalyzer or FortiManager with FortiAnalyzer functions enabled will be used for SD-WAN-related reports and widgets (FortiView -> SD-WAN).
View the stored SLA logs via CLI:
diagnose sys sdwan sla-log <name> <seq-num>
To display the SLA logs per interface, use the following command:
diagnose sys sdwan intf-sla-log <name>
Here is an example:
diagnose sys sdwan sla-log SLA 1 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.