FortiOS Event Log - Automation for OSPF Change

[Brenden]

I am seeking guidance on using the FortiGate automation feature with FortiOS event log. I have configured a stitch to trigger on OSPF neighbor changes, specifically when a neighbor goes up or down. This setup works as intended for individual OSPF neighbors. After the trigger, then it performs the CLI script that does what it supposed to do and it works great.

However, I want to adjust the configuration so that the stitch triggers only when two individual OSPF neighbors are down simultaneously. I have attempted to create this condition, but I am encountering an issue where only the first message field activates correctly, while the second message field does not do anything. Also, this is setup using the parallel option.

Does anyone have guidance on how to set up the automation so it triggers correctly when both OSPF neighbors are down? Are there specific configurations or troubleshooting steps I should follow to address this issue?

[AEK]

As fat as I know there is no possibility in FortiOS to configure double trigger in the same automation stitch in the following manner: IF trigger1 & trigger2 THEN action1.

I'm not sure and I didn't test it before but it is possible that this can be done with FortiAnalyzer playbook.