Fortinet black logo

Administration Guide

Event thresholds

Copy Link
Copy Doc ID 825689eb-200d-11e9-b6f6-f8bc1258b856:499916
Download PDF

Event thresholds

This option allows you to monitor license usage, memory usage, process thread counts, and disk space, and establish thresholds for the processes and hard drives. Each process type has its own thread count and maximum memory allocations. The percentages in the thresholds are not relative to the total memory available on the appliance; they are relative to the maximum amounts of memory that each loader process is allowed to consume.

View the memory allocated to each process in the Performance panel on the Dashboard. The number of threads used by the process is also contained in the panel. See Performance.

When a threshold is exceeded, an event is generated. Each event has an associated alarm which is mapped by default. Each specific event or alarm mapping is configured so that multiple events for a specific process or threshold results in a single alarm. Modify the default mappings in Event to Alarm Mappings. You can also configure a specific action, such as email notification. See Map events to alarms for details.

Settings

Threshold

Description

License thresholds

Concurrent Licenses
Warning/Critical

Generated when the license usage threshold is reached. This threshold is a percentage of the total number of licenses configured. Default Warning = 75%. Default Critical = 95%.

Hardware thresholds

Hard Disk Usage
Warning / Critical

Generated when the disk usage threshold is reached. This threshold is a percentage of the space allocated for the bsc and var partitions. The percentage is calculated for each partition separately. When any one partition reaches the threshold the event is generated. Thresholds calculated for individual partitions are never combined. Therefore if the combined total crosses the threshold, no event is generated. Default Warning = 85%. Default Critical = 95%.

Memory Usage
Warning / Critical

Generated when the memory usage threshold is reached for the appliance. This threshold is a percentage of the total allocated memory. Default Warning = 85%. Default Critical = 95%.

Network Topology Size
Warning / Critical

Generated when the system sizing tool detects that the appliance has reached the threshold for possible connections. This threshold is a percentage of the total connections that the appliance can manage. Default Warning = 85%. Default Critical = 95%.

Software thresholds

Process Thread Count
Warning / Critical

Generated when the process thread count threshold is reached. This threshold is a specific number of threads the process is using.

MasterLoader: Default Warning = 500. Default Critical = 575.

Nessus: Default Warning = 100. Default Critical = 125.

Process Memory Usage
Warning / Critical

Generated when the memory usage threshold is reached for the process. This threshold is a percentage of the total allocated memory. Default Warning = 85%. Default Critical = 95%.

Set thresholds for self-monitoring events

  1. Click Logs > Event Management.
  2. Click the Event Thresholds button at the top of the window.
  3. Click the License Tab. Enter the value for the warning and critical levels of the license usage.
  4. Click the Hardware Tab. Enter the value for the warning and critical levels of the hardware thresholds for hard disk and memory usage.
  5. Click the Software Tab. Enter the value for the warning and critical levels of the software thresholds for each system process.
  6. Click OK.

Event thresholds

This option allows you to monitor license usage, memory usage, process thread counts, and disk space, and establish thresholds for the processes and hard drives. Each process type has its own thread count and maximum memory allocations. The percentages in the thresholds are not relative to the total memory available on the appliance; they are relative to the maximum amounts of memory that each loader process is allowed to consume.

View the memory allocated to each process in the Performance panel on the Dashboard. The number of threads used by the process is also contained in the panel. See Performance.

When a threshold is exceeded, an event is generated. Each event has an associated alarm which is mapped by default. Each specific event or alarm mapping is configured so that multiple events for a specific process or threshold results in a single alarm. Modify the default mappings in Event to Alarm Mappings. You can also configure a specific action, such as email notification. See Map events to alarms for details.

Settings

Threshold

Description

License thresholds

Concurrent Licenses
Warning/Critical

Generated when the license usage threshold is reached. This threshold is a percentage of the total number of licenses configured. Default Warning = 75%. Default Critical = 95%.

Hardware thresholds

Hard Disk Usage
Warning / Critical

Generated when the disk usage threshold is reached. This threshold is a percentage of the space allocated for the bsc and var partitions. The percentage is calculated for each partition separately. When any one partition reaches the threshold the event is generated. Thresholds calculated for individual partitions are never combined. Therefore if the combined total crosses the threshold, no event is generated. Default Warning = 85%. Default Critical = 95%.

Memory Usage
Warning / Critical

Generated when the memory usage threshold is reached for the appliance. This threshold is a percentage of the total allocated memory. Default Warning = 85%. Default Critical = 95%.

Network Topology Size
Warning / Critical

Generated when the system sizing tool detects that the appliance has reached the threshold for possible connections. This threshold is a percentage of the total connections that the appliance can manage. Default Warning = 85%. Default Critical = 95%.

Software thresholds

Process Thread Count
Warning / Critical

Generated when the process thread count threshold is reached. This threshold is a specific number of threads the process is using.

MasterLoader: Default Warning = 500. Default Critical = 575.

Nessus: Default Warning = 100. Default Critical = 125.

Process Memory Usage
Warning / Critical

Generated when the memory usage threshold is reached for the process. This threshold is a percentage of the total allocated memory. Default Warning = 85%. Default Critical = 95%.

Set thresholds for self-monitoring events

  1. Click Logs > Event Management.
  2. Click the Event Thresholds button at the top of the window.
  3. Click the License Tab. Enter the value for the warning and critical levels of the license usage.
  4. Click the Hardware Tab. Enter the value for the warning and critical levels of the hardware thresholds for hard disk and memory usage.
  5. Click the Software Tab. Enter the value for the warning and critical levels of the software thresholds for each system process.
  6. Click OK.