CPU and Memory usage at 50% threshold with email alert

[StevenT]

Hi All,

I had found the CPU threshold and its alert but for the memory.

I had found a few but did not understand this trigger event in the automation for memory.

Automation > Trigger

memory conserve mode entered
memory conserve mode exited

What is this 2 event log and what does it do?

And for the below threshold percentage, once we had configured it. How do we set the email alert under the automation for IF the memory threshold hit 50% and email alert.

I using this guide: https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/194558

config system global
    set memory-use-threshold-extreme <integer>
    set memory-use-threshold-green <integer>
    set memory-use-threshold-red <integer>
end 

[srajeswaran]

Email alerts configuration is explained in following article - https://community.fortinet.com/t5/FortiGate/Technical-Tip-Use-FortiGate-automation-stitches-for-aler...

Regarding the "memory conserve mode entered", these events are generated when the system enters the memory usage above the value specified under "memory-use-threshold-red <integer>".

And "memory conserve mode exited" is generated when the memory usage falls below the value configured under "set memory-use-threshold-green <integer>".

In general, 50% looks very aggressive. I would suggest you monitor the memory usage value for a longer period (may be last couple of months) to understand whats the normal value and then configure the thresholds.

[StevenT]

Thank you for the immediate assistance. I will try it out in our lab with those articles and do a network stress test on the FortiGate as a simulation.

[srajeswaran]

That's a very good option before applying the changed on production firewalls.

[asengar · Accepted solution]

Hi @StevenT 

Thanks for posting your query.

I can see you wanted to configure an automation stitch for the conserve mode issue.

As per the above share configuration you can set the threshold values for the memory, refer the below document for the default setting.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-conserve-mode-is-triggered/ta-p/198580...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Execute-a-CLI-script-based-on-HIGH-memory/...

Find the below document to configure the automation stitch for the conserve mode issue

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Automation-stitch-for-conserve-mode/ta-p/2...

I hope it will help you clear your queries.

Regards

[StevenT]

One more question.

The set cpu threshold in the config sys global. Does the threshold refer to the individual core CPU or the Overall Core CPU?

[srajeswaran]

Its the average CPU usage of all cores.

[StevenT]

Thank you