Fortinet white logo
Fortinet white logo

Handbook

Creating automation stitches

Creating automation stitches

To create an automation, you can set up a trigger event and response actions that cause the FortiADC to respond in a predetermined way. You can set up triggers for event types, such as compromised host, high CPU, and configuration changes. The automation launches actions in response, such as executing CLI commands, sending email alerts, notifications, and webhooks.

To create and test an automation:
  1. Go to Security Fabric > Automation. Select Create New.
  2. Customize the stitch by selecting a Trigger event type and the corresponding Action that you would like to automate. You can configure multiple actions for the same event trigger.
  3. Enter the following information:
    NameEnter a name for the new automation.
    StatusSelect Enabled to enable this automation.

    Egress VDOM

    The Egress VDOM determines the VDOM from which the alert packets will be sent, regardless of the local VDOM from which the automation is configured. This affects automation actions that require alert packets to be sent, which include Syslog, SNMP Trap, Webhook, and Email. Actions such as Syslog, SNMP Trap, and Webhook can egress from either the local or root VDOM. However, for Email actions, the Egress VDOM must be Root to correspond with the SMTP server configured in Global Settings.

    Select the Egress VDOM from which the alert packets will be sent:

    • Local — Alert packets will be sent from the local VDOM from which the automation is configured.

    • Root — Alert packets will be sent from the Root VDOM.

    Trigger

    Select a trigger. For more information, see Triggers.

    Action

    Select an action. For more information, see Actions.

    Minimum interval (seconds)Enter a minimum time interval, in seconds, during which you won't receive repeated notifications for the same trigger occurrence. When the minimum time interval expires, you'll receive an alert with a compilation report of any events that occurred during the allotted interval period.
  4. Select OK.

Creating automation stitches

Creating automation stitches

To create an automation, you can set up a trigger event and response actions that cause the FortiADC to respond in a predetermined way. You can set up triggers for event types, such as compromised host, high CPU, and configuration changes. The automation launches actions in response, such as executing CLI commands, sending email alerts, notifications, and webhooks.

To create and test an automation:
  1. Go to Security Fabric > Automation. Select Create New.
  2. Customize the stitch by selecting a Trigger event type and the corresponding Action that you would like to automate. You can configure multiple actions for the same event trigger.
  3. Enter the following information:
    NameEnter a name for the new automation.
    StatusSelect Enabled to enable this automation.

    Egress VDOM

    The Egress VDOM determines the VDOM from which the alert packets will be sent, regardless of the local VDOM from which the automation is configured. This affects automation actions that require alert packets to be sent, which include Syslog, SNMP Trap, Webhook, and Email. Actions such as Syslog, SNMP Trap, and Webhook can egress from either the local or root VDOM. However, for Email actions, the Egress VDOM must be Root to correspond with the SMTP server configured in Global Settings.

    Select the Egress VDOM from which the alert packets will be sent:

    • Local — Alert packets will be sent from the local VDOM from which the automation is configured.

    • Root — Alert packets will be sent from the Root VDOM.

    Trigger

    Select a trigger. For more information, see Triggers.

    Action

    Select an action. For more information, see Actions.

    Minimum interval (seconds)Enter a minimum time interval, in seconds, during which you won't receive repeated notifications for the same trigger occurrence. When the minimum time interval expires, you'll receive an alert with a compilation report of any events that occurred during the allotted interval period.
  4. Select OK.