SD-WAN link status alert / notification

[lior]

Hi,

I would like to get an email alert when my sd-wan fail over from one connection to the other.

found this link for older FortiOS but i don't have this event in FortiOs 7.4:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SD-WAN-link-status-update-through-automati...

Any info for the correct event to alert?

Thanks,

Lior.

[akristof]

Hello,

You might use these logs:

https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/856781/understanding-sd-wan-...

But depends on what you mean by sdwan failover. When any SDWAN rule will change outgoing interface or when default route (for example) will be removed because of SDWAN health-check?

[xshkurti]

Hi,

You can do it by creating an automatic stitch
Security Fabric ->Create New Automatic Stitch -> Add Trigger -> Create -> FortiOS Event Log -> Event -> Filter for SDWAN and select SDWAN SLA Information warning or SDWAN status warning
Then go to Add Action and select Email Notification.

Regards,

Xhafer