Creating Alert Based on UNDP Poller Output (FortiGate VPN Tunnel)

Question

Hi Community Members,

I have configured a UNDP poller to fetch the VPN tunnel status for FortiGate firewalls using the Get Table method.I would now like to create an alert based on the output generated by this UNDP poller.

However, I am unsure how to properly configure the alert conditions using the collected data.

Could anyone please guide me on how to set up an alert for this requirement? Any suggestions or best practices would be greatly appreciated.Thanks in advance for your support.

ahawkins72 · Answer

Morning!  Apologies for late reply as I was under the weather Monday and catching up yesterday.

I don't have any UnDPs in my environment polling using GetTable, so I'm flying a little bit blind here, but maybe we can get there.

One variable I see is ${N=SwisEntity;M=CustomPollerStatusScalar.Status} that may pull your status.  If not, try this.  In your alert action, (I am using send email here) click insert variable:

In the select variable to insert window, search for "poller" and that should pull up anything that is custom poller based.  You can search in there to see if there's a variable there that fits your need:

Also if you change Show variables for: to Custom Node Poller:

You will have an option at the bottom of the window to change your test object, which I believe is a fairly newer-ish feature?  You can try to change your test object to this specific poller which would help even more.

Sorry for the sketchy screenshot above, I was avoiding grabbing device name.  You can see the little blue Change on the top right though.

I hope this helps, please let me know! :)

stuartd · Answer

Can you share the UnDP itself? And also a screenshot of your current alert config would be helpful?

If so I'll see if I can replicate it and test at my side.

KOHLIfied · Answer

Hi @ahawkins72 ,

Thank you for sharing the link. However, it does not address my specific requirement.

I have two UnDP pollers configured:

* One poller returns the VPN tunnel name.
* The other poller returns the VPN tunnel status.

My objective is to create an alert that includes both the tunnel name and its current status in the notification.

I followed the guidance provided in the KB article you shared and was able to create the alert. However, I am unable to identify the appropriate alert variables/macros needed to display the tunnel name and status in the alert message.

Could you please advise on which variables should be used to retrieve these values within the alert notification?