FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
aahmadbasri
Staff
Staff
Article Id 296807
Description This article describes the case when the Automation stitch is not working correctly for multiple event logs.
Scope FortiGate, Automation stitch, Event logs.
Solution

When Automation stitch is triggered, a system event with log ID 46600 will be logged:
 

KB7.png

 

date=2024-01-31 time=08:31:51 eventtime=1706661110084497125 tz="+0800" logid="0100046600" type="event" subtype="system" level="notice" vd="root" logdesc="Automation stitch triggered" stitch="SendEmail" trigger="TestTrigger" stitchaction="Default Email" from="log" msg="stitch:SendEmail is triggered."

 

If the Automation stitch is not triggered at all or not working as expected, confirm that only a maximum of 16 log IDs are configured in the trigger. 

 

Bezza-kvm34 #  sh system  automation-trigger TestTrigger

config system automation-trigger

    edit "TestTrigger"

        set event-type event-log

        set logid 32021 32002 32001 43714  --> Maximum of 16 log ids.

    next

end