topic Re: How to Configure Email Alerts for System Logs to monitor firewall performance in General Topics

How to Configure Email Alerts for System Logs to monitor firewall performance

mnmeetz.singh — Sat, 01 Jun 2019 20:15:10 GMT

My Requirement is to configure email alerts so that I will get email notification when my firewall got shutdown automatically , rebooted due to any cause .
Previously I configured high alerts but that was also throwing unwanted alerts so please help me in fine-tuning this

Re: How to Configure Email Alerts for System Logs to monitor firewall performance

kiwi — Mon, 03 Jun 2019 11:45:50 GMT

Hi @mnmeetz.singh ,

You can use filter builder to finetune :

Device tab > Log Settings > System > Add > Filter (drop down) > Filter Builder

For example you can add the filter as shown below :

I hope this helps !

-Kiwi.

Re: How to Configure Email Alerts for System Logs to monitor firewall performance

mnmeetz.singh — Mon, 03 Jun 2019 12:48:23 GMT

Hi kiwi,

Thanks for your response and i have made below filter string to monitor performance.

Please suggest more events so that i can put this in my filter.

( severity eq high ) and ( eventid eq system-shutdown ) or ( eventid eq system-start ) or ( description contains 'Dataplane is now up' ) or ( description contains 'System restart requested by ' )

BR//

Manmeet Singh