Fortinet black logo

Administration Guide

Automation trigger settings

Automation trigger settings

FortiPAM can be configured to perform actions when an event log is triggered. This is in the system automation table.

Automation trigger settings can only be configured via the CLI.

Automation trigger settings via the CLI Example

To configure automation trigger settings:
  1. In the CLI console, enter the following commands:
     config system automation-trigger
      edit "fold_chg"
       set event-type event-log
       set logid 44547 44548 #from the log id "0100044547". Remove the first 5 digits (category/subcategory prefix)
       set category 1 #first 2 digits of the log ID "01"
       set logic and
       config fields
        edit 1
         set match regex
         set name "msg"
         set value "E*t"
        next
        edit 2
         set name "user"
         set value "u1"
        next
       end
      next
     end
    

    If the field is set to match regex, it uses the regular expression to match the field with the value _name_. Otherwise, it uses the default match, using _*_ character as a wildcard.

    If the logic is set to _and_, all fields must match to trigger the action. Otherwise, if it is set to _or_, any field matching triggers the action.

Automation trigger settings

FortiPAM can be configured to perform actions when an event log is triggered. This is in the system automation table.

Automation trigger settings can only be configured via the CLI.

Automation trigger settings via the CLI Example

To configure automation trigger settings:
  1. In the CLI console, enter the following commands:
     config system automation-trigger
      edit "fold_chg"
       set event-type event-log
       set logid 44547 44548 #from the log id "0100044547". Remove the first 5 digits (category/subcategory prefix)
       set category 1 #first 2 digits of the log ID "01"
       set logic and
       config fields
        edit 1
         set match regex
         set name "msg"
         set value "E*t"
        next
        edit 2
         set name "user"
         set value "u1"
        next
       end
      next
     end
    

    If the field is set to match regex, it uses the regular expression to match the field with the value _name_. Otherwise, it uses the default match, using _*_ character as a wildcard.

    If the logic is set to _and_, all fields must match to trigger the action. Otherwise, if it is set to _or_, any field matching triggers the action.