Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
it-sinardigitaln
New Contributor

Forti 60F: How can I trigger a webhook when a specific IP stops replying to ping?

Body
Hi everyone,

Goal
I want my FortiGate 60F to continuously ping a specific host, for example 172.16.23.254. If it stops replying, I need FortiGate to trigger a webhook that will notify a Telegram group. The Telegram webhook side is already working, so I only need help with the FortiGate trigger.

Environment

  • Model: FortiGate 60F

  • FortiOS: 7.4.8

  • Target to monitor: 172.16.23.254

  • The target is on LAN, reachable via interface: internal4

What I have working

  • A webhook action that successfully sends a message to my Telegram bot when manually tested.

What I am trying to achieve on FortiGate

  1. Set up a reliable ICMP probe to 172.16.23.254

  2. Generate a log event when the host is considered down, and again when it recovers

  3. Use an Automation Stitch to catch that event and call the webhook

Questions

  1. What is the best practice approach for my case?

Desired outcome

  • When 172.16.23.254 fails ICMP for N consecutive probes, FortiGate sends a webhook to Telegram with a short message that includes the host, status, and time.

  • When it recovers, FortiGate sends a recovery message.

If sample config helps, here is the intent

  • Monitor 172.17.23.254 with ICMP from the correct interface

  • Log up and down state changes

  • Automation Stitch with Event Log trigger that calls my webhook action

If you could share the recommended feature choice, logging settings, and a clean example of the Automation Stitch trigger filter, I would really appreciate it. A minimal CLI or GUI path would be perfect.

Thanks in advance.

1 Solution
funkylicious
SuperUser
SuperUser

hi,

try setting a link monitor for this.

you can find more info about it, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Link-Monitor-Explained/ta-p/197504 

"jack of all trades, master of none"

View solution in original post

"jack of all trades, master of none"
1 REPLY 1
funkylicious
SuperUser
SuperUser

hi,

try setting a link monitor for this.

you can find more info about it, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Link-Monitor-Explained/ta-p/197504 

"jack of all trades, master of none"
"jack of all trades, master of none"
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors