Description |
This article describes how to trigger an automation-stitch by matching a partial string in a log field using wildcard. |
Scope | Versions 6.4.3 and Later. Versions 7.0.0 and later. |
Solution |
- Use Wildcard (*) to match sub-string in field’s value. - It can be used to match a string of field of any log. - Example: This example shows how to catch the 'Down BGP Notification' string in field "msg" when log of BGP is generated.
Log:
Field: msg Value: "BGP: %BGP-5-ADJCHANGE: VRF 0 neighbor 192.168.10.2 Down BGP Notification FSM-ERR
date=2022-01-22 time=14:14:06 eventtime=1642889646347816623 tz="-0800" logid="0103020300" type="event" subtype="router" level="warning" vd="root" logdesc="BGP neighbor status changed" msg="BGP: %BGP-5-ADJCHANGE: VRF 0 neighbor 192.168.10.2 Down BGP Notification FSM-ERR
Syntax:
# config systemautomation-trigger end
Configuration:
# config system automation-stitc
|
|
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.