How to Configure Email Alerts for System Logs to monitor firewall performance

[mnmeetz.singh]

My Requirement is to configure email alerts so that I will get email notification when my firewall got shutdown automatically , rebooted due to any cause .
Previously I configured high alerts but that was also throwing unwanted alerts so please help me in fine-tuning this

[kiwi]

Hi @mnmeetz.singh ,

You can use filter builder to finetune :

Device tab > Log Settings > System > Add > Filter (drop down) > Filter Builder

For example you can add the filter as shown below :

I hope this helps !

-Kiwi.

[mnmeetz.singh]

Hi kiwi,

Thanks for your response and i have made below filter string to monitor performance.

Please suggest more events so that i can put this in my filter.

( severity eq high ) and ( eventid eq system-shutdown ) or ( eventid eq system-start ) or ( description contains 'Dataplane is now up' ) or ( description contains 'System restart requested by ' )

BR//

Manmeet Singh