Security Events

Select whether to apply the security events automation stitch to All or VS:

• All — All related events will trigger the Alert action.
• VS — Only specified Virtual Server related events will trigger the Alert action.

The Virtual Server option appears if Apply to is VS.

Specify the virtual server. This is required.

Select the security events that will trigger the action.

Enable to define a Rolling Window Time and Number of Occurence.

The Rolling Window Time sets a period of time in which a number of events must take place for an action to be triggered. The number of events that must take place within this period of time is set in the Number of Occurrences option.

The Rolling Window Time option appears if Rolling Window is enabled.

Specify the range of time (in seconds) for the rolling window.

The Number of Occurrences option appears if Rolling Window is enabled.

Specify the number of events that must take place before FortiADC will trigger the action.

SLB Metric

Select the server load balance performance events that will trigger the action.

The metric is compared to the Value field according to the selected option:

• Ge—greater than

• Le—less than

• Eq—equal to

The action will be triggered if the specified value satisfies the selected option.

Specify the metric value that the Comparator uses to determine if the metric triggers an action, for example, 2 milliseconds.

Select the virtual server on which the SLB Metric trigger applies.

Session duration.

Period Block IP

Select this trigger to retrieve the Source IP addresses from Period Block list.

HA Failover

Select the HA failover events that will trigger the action.

Enable to define a Rolling Window Time and Number of Occurence.

The Rolling Window Time sets a period of time in which a number of events must take place for an action to be triggered. The number of events that must take place within this period of time is set in the Number of Occurrences option.

The Rolling Window Time option appears if Rolling Window is enabled.

Specify the range of time (in seconds) for the rolling window.

The Number of Occurrences option appears if Rolling Window is enabled.

Specify the number of events that must take place before FortiADC will trigger the action.

System Metrics

Select the system metrics events (average CPU usage, average memory usage, etc.) that will trigger the action.

The metric is compared to the Value field according to the selected option:

• Ge—greater than

• Le—less than

• Eq—equal to

The action will be triggered if the specified value satisfies the selected option.

Specify the metric value that the Comparator uses to determine if the metric triggers an action.

Event duration.

Schedule

Select the frequency of the action, that is, whether the action will be executed hourly, daily, weekly, or monthly.

The action will be executed at the specified Hour:Minute.

System Events

Select whether to apply the system events automation stitch to All, VS or Real Server:

• All — All related events will trigger the Alert action.
• VS — Only specified Virtual Server related events will trigger the Alert action.
• Real Server — Only the specified Virtual Server, Pool, and Real Server related events will trigger the Alert action.

The Virtual Server option appears if Apply to is VS.

Specify the virtual server. This is required.

The Real Server option appears if Apply to is VS.

Specify the virtual server, pool, and real server.

The real server field is required, however, the virtual server and pool fields can be empty.

Select the system events (bad PSU fan, good device fan, etc.) that will trigger the action.

Enable to define a Rolling Window Time and Number of Occurence.

The Rolling Window Time sets a period of time in which a number of events must take place for an action to be triggered. The number of events that must take place within this period of time is set in the Number of Occurrences option.

The Rolling Window Time option appears if Rolling Window is enabled.

Specify the range of time (in seconds) for the rolling window.

The Number of Occurrences option appears if Rolling Window is enabled.

Specify the number of events that must take place before FortiADC will trigger the action.

Interface Metric

Select the network interface events that will trigger the action.

The metric is compared to the Value field according to the selected option:

• Ge—greater than

• Le—less than

• Eq—equal to

The action will be triggered if the specified value satisfies the selected option.

Specify the metric value that the Comparator uses to determine if the metric triggers an action.

Select the network interface on which the Interface Metric trigger applies.