Skip to main content

Fortinet FortiWeb SNMP

Monitoring Connector Assets​

Monitored Objects​

The Monitoring Connector Fortinet FortiWeb SNMP collects metrics for:

  • Interfaces
  • Proxy
  • System

Discovery rules​

Rule nameDescription
Net-Fortinet-Fortiweb-SNMP-Interface-NameDiscover network interfaces and monitor bandwidth utilization

Collected Metrics​

Metric nameDescriptionUnit
statusStatus of the interface
interface_name#interface.traffic.in.bitspersecondIncoming traffic going through the interfaceb/s
interface_name#interface.traffic.in.percentagePercentage of the interface's in bandwidth usage%
interface_name#interface.traffic.out.bitspersecondOutgoing traffic going through the interfaceb/s
interface_name#interface.traffic.out.percentagePercentage of the interface's out bandwidth usage%

A regexp filter is available to target a specific interface identifier - ifName [--interface='^eth0$' --name]

Prerequisites​

To monitor your Fortinet FortiWeb, the SNMP must be configured. The Poller should be able to perform SNMP requests toward the Fortinet device over SNMP UDP/161 port.

Setup​

  1. Install the Centreon Plugin on every Poller:
yum install centreon-plugin-Network-Fortinet-Fortiweb-Snmp
  1. On the Centreon Web interface in Configuration > Monitoring Connectors Manager, install the Fortinet FortiWeb SNMP Pack

Host configuration​

  • Add a new Host and fill the IP Address/FQDN, SNMP Version and SNMP Community fields according to the device's configuration
  • Apply the Net-Fortinet-Fortiweb-SNMP-custom Host Template

When using SNMP v3, use the SNMPEXTRAOPTIONS Macro to add specific authentication parameters More information in the Troubleshooting SNMP section.

MandatoryNameDescription
SNMPEXTRAOPTIONSConfigure your own SNMPv3 credentials combo

How to test the Plugin and what are the main options for?​

Once the plugin installed, log into your Centreon Poller CLI using the centreon-engine user account and test the Plugin by running the following command:

/usr/lib/centreon/plugins/centreon_fortinet_fortiweb_snmp.pl \
    --plugin=network::fortinet::fortiweb::snmp::plugin \
    --mode=system \
    --hostname=10.30.2.114 \
    --snmp-version='2c' \
    --snmp-community='fortinet_ro' \
    --warning-cpu-load='90' \
    --critical-cpu-load='95' \
    --verbose

Expected command output is shown below:

OK: system usage is ok | 'cpu.utilization.percentage'=12.00%;0:90;0:95;0;100 'memory.usage.percentage'=79.00%;;;0;100 'disk.log.space.usage.percentage'=74.00%;;;0;100
checking system
    high-availability mode: standalone
    cpu load: 12.00 %
    memory used: 79.00 %
    disk log space used: 74.00 %

The command above monitors Fortinet FortiWeb (--plugin=network::fortinet::fortiweb::snmp::plugin --mode=system) identified by the IP address 10.30.2.114 (--hostname=10.30.2.114). As the Plugin is using the SNMP protocol to request the device, the related community and version are specified (--snmp-version='2c' --snmp-community='fortinet_ro').

This command would trigger a WARNING alarm if cpu utilization over 90% (--warning-cpu-utilization='90') and a CRITICAL alarm over 95% (--critical-cpu-utilization='95').

All the options as well as all the available thresholds can be displayed by adding the --help parameter to the command:

/usr/lib/centreon/plugins/centreon_fortinet_fortiweb_snmp.pl \
    --plugin=network::fortinet::fortiweb::snmp::plugin \
    --mode=system \
    --help

Troubleshooting​

Troubleshooting plugins