Monitor performance SLA
SD-WAN diagnostics can be used to help maintain your SD-WAN solution
Monitoring SD-WAN link quality status
Link quality plays a significant role in link selection for SD-WAN. Investigate any prolonged issues with packet loss, latency, or jitter to ensure that your network does not experience degraded performance or an outage.
You can monitor the link quality status of SD-WAN interface members by going to Network > SD-WAN and selecting the Performance SLAs tab.
The live charts show the packet loss, latency, or jitter for the selected health check. Hover the cursor over a line in the chart to see the specific value for that interface at that specific time.
The table shows information about each health check, including the configured servers, link quality data, and thresholds. The colored arrow indicates the status of the interface when the last status check was performed: green means that the interface was active, and red means that the interface was inactive. Hover the cursor over the arrow for additional information.
Monitoring system event logs
The features adds an SD-WAN daemon function to keep a short, 10 minute history of SLA that can be viewed in the CLI.
Performance SLA results related to interface selection, session failover, and other information, can be logged. These logs can then be used for long-term monitoring of traffic issues at remote sites, and for reports and views in FortiAnalyzer.
The time intervals that Performance SLA fail and pass logs are generated in can be configured.
To configure the fail and pass logs' generation time interval:
config system sdwan
config health-check
edit "PingSLA"
set sla-fail-log-period 30
set sla-pass-log-period 60
next
end
end
To view the 10 minute Performance SLA link status history:
FGDocs # diagnose sys sdwan sla-log PingSLA 1 Timestamp: Fri Sep 4 10:32:37 2020, vdom root, health-check PingSLA, interface: wan2, status: up, latency: 4.455, jitter: 0.430, packet loss: 0.000%. Timestamp: Fri Sep 4 10:32:37 2020, vdom root, health-check PingSLA, interface: wan2, status: up, latency: 4.461, jitter: 0.436, packet loss: 0.000%. Timestamp: Fri Sep 4 10:32:38 2020, vdom root, health-check PingSLA, interface: wan2, status: up, latency: 4.488, jitter: 0.415, packet loss: 0.000%. ... Timestamp: Fri Sep 4 10:42:36 2020, vdom root, health-check PingSLA, interface: wan2, status: up, latency: 6.280, jitter: 0.302, packet loss: 0.000%. Timestamp: Fri Sep 4 10:42:37 2020, vdom root, health-check PingSLA, interface: wan2, status: up, latency: 6.261, jitter: 0.257, packet loss: 0.000%. Timestamp: Fri Sep 4 10:42:37 2020, vdom root, health-check PingSLA, interface: wan2, status: up, latency: 6.229, jitter: 0.245, packet loss: 0.000%.
SLA pass logs
The FortiGate generates Performance SLA logs at the specified pass log interval (sla-pass-log-period) when SLA passes.
date="2021-04-15" time="10:04:56" id=6951431609690095758 bid=52507 dvid=1047 itime=1618506296 euid=3 epid=3 dsteuid=3 dstepid=3 logver=700000066 logid="0113022925" type="event" subtype="sdwan" level="information" msg="Health Check SLA status." logdesc="SDWAN SLA information" status="up" interface="port1" eventtime=1618506296222639301 tz="-0700" eventtype="SLA" jitter="0.277" inbandwidthavailable="10.00Gbps" outbandwidthavailable="10.00Gbps" bibandwidthavailable="20.00Gbps" packetloss="1.000%" latency="186.071" slamap="0x1" healthcheck="BusinessCritical_CloudApps" slatargetid=1 outbandwidthused="40kbps" inbandwidthused="24kbps" bibandwidthused="64kbps" devid="FGVM02TM20000000" vd="root" devname="Branch_Office_01" csf="fabric"
date="2021-04-15" time="10:04:56" id=6951431609690095759 bid=52507 dvid=1047 itime=1618506296 euid=3 epid=3 dsteuid=3 dstepid=3 logver=700000066 logid="0113022925" type="event" subtype="sdwan" level="information" msg="Health Check SLA status." logdesc="SDWAN SLA information" status="up" interface="port2" eventtime=1618506296223163068 tz="-0700" eventtype="SLA" jitter="0.204" inbandwidthavailable="10.00Gbps" outbandwidthavailable="10.00Gbps" bibandwidthavailable="20.00Gbps" packetloss="0.000%" latency="185.939" slamap="0x1" healthcheck="BusinessCritical_CloudApps" slatargetid=1 outbandwidthused="142kbps" inbandwidthused="23kbps" bibandwidthused="165kbps" devid="FGVM02TM20000000" vd="root" devname="Branch_Office_01" csf="fabric"
In the FortiAnalyzer GUI:
SLA fail logs
The FortiGate generates Performance SLA logs at the specified fail log interval (sla-fail-log-period) when SLA fails.
date="2021-04-15" time="10:04:59" id=6951431618280030243 bid=52507 dvid=1047 itime=1618506298 euid=3 epid=3 dsteuid=3 dstepid=3 logver=700000066 logid="0113022925" type="event" subtype="sdwan" level="notice" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold." logdesc="SDWAN SLA information" status="down" interface="To-HQ-MPLS" eventtime=1618506299718862835 tz="-0700" eventtype="SLA" jitter="0.000" inbandwidthavailable="10.00Gbps" outbandwidthavailable="10.00Gbps" bibandwidthavailable="20.00Gbps" packetloss="100.000%" latency="0.000" slamap="0x0" healthcheck="BusinessCritical_CloudApps" slatargetid=1 metric="packetloss" outbandwidthused="0kbps" inbandwidthused="0kbps" bibandwidthused="0kbps" devid="FGVM02TM20000000" vd="root" devname="Branch_Office_01" csf="fabric"
date="2021-04-15" time="10:05:03" id=6951431639754866704 bid=52514 dvid=1046 itime=1618506303 euid=3 epid=3 dsteuid=3 dstepid=3 logver=700000066 logid="0113022925" type="event" subtype="sdwan" level="notice" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold." logdesc="SDWAN SLA information" status="down" interface="To-HQ-MPLS" eventtime=1618506304085863643 tz="-0700" eventtype="SLA" jitter="0.000" inbandwidthavailable="10.00Gbps" outbandwidthavailable="10.00Gbps" bibandwidthavailable="20.00Gbps" packetloss="100.000%" latency="0.000" slamap="0x0" healthcheck="BusinessCritical_CloudApps" slatargetid=1 metric="packetloss" outbandwidthused="6kbps" inbandwidthused="3kbps" bibandwidthused="9kbps" devid="FGVM02TM20000000" vd="root" devname="Branch_Office_02" csf="fabric"
In the FortiAnalyzer GUI:
