CLI script action
CLI scripts can run when an automation stitch is triggered. The output of the script can be sent as an email action.
In this example, the script sets the idle timeout value to 479 minutes, and sends an email with the script output.
To configure a stitch with a CLI script action in the GUI:
- Go to Security Fabric > Automation and click Create New.
- Enter the stitch name (auto-cli-1).
- Configure the trigger:
- Click Add Trigger.
- Click Create and select Security Rating Summary.
- Enter the following:
Name
auto-cli-1
Report
Security Posture
- Click OK.
- Select the trigger in the list and click Apply.
- Configure the CLI Script action:
- Click Add Action.
- Click Create and select CLI Script.
- Enter the following:
Name
admintimeout
Required
Enable
Script
config system global set admintimeout 479 end
Administrator profile
Select a profile
- Click OK.
- Select the action in the list and click Apply.
- Configure the Email notification action:
- Click Add Action.
- Click Create and select Email.
- Enter the following:
Name
auto-cli-1_email
To
Enter an email address
Subject
CSF stitch alert
Body
%%results%%
- Click OK.
- Select the action in the list and click Apply.
- Click OK.
To configure a stitch with a CLI script action in the CLI:
- Create the automation trigger:
config system automation-trigger edit "auto-cli-1" set event-type security-rating-summary next end
- Create the automation actions:
config system automation-action edit "admintimeout" set action-type cli-script set minimum-interval 0 set delay 0 set required enable set script "config system global set admintimeout 479 end" set accprofile "super_admin" next edit "auto-cli-1_email" set action-type email set email-to "admin@fortinet.com" set email-subject "CSF stitch alert" set message "%%results%%" set minimum-interval 0 next end
- Create the automation stitch:
config system automation-stitch edit "auto-cli-1" set status enable set trigger "auto-cli-1" set action "admintimeout" "auto-cli-1_email" next end
Sample email
The email sent by the action will look similar to the following: