Created on 01-30-2024 11:41 PM Edited on 01-30-2024 11:42 PM By Jean-Philippe_P
Description | This article describes the case when the Automation stitch is not working correctly for multiple event logs. |
Scope | FortiGate, Automation stitch, Event logs. |
Solution |
When Automation stitch is triggered, a system event with log ID 46600 will be logged:
date=2024-01-31 time=08:31:51 eventtime=1706661110084497125 tz="+0800" logid="0100046600" type="event" subtype="system" level="notice" vd="root" logdesc="Automation stitch triggered" stitch="SendEmail" trigger="TestTrigger" stitchaction="Default Email" from="log" msg="stitch:SendEmail is triggered."
If the Automation stitch is not triggered at all or not working as expected, confirm that only a maximum of 16 log IDs are configured in the trigger.
Bezza-kvm34 # sh system automation-trigger TestTrigger config system automation-trigger edit "TestTrigger" set event-type event-log set logid 32021 32002 32001 43714 --> Maximum of 16 log ids. next end |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.