Fortinet Fortigate in Grafana

To get metrics from your FortiGate in Grafana using Telegraf and InfluxDB. Enable SNMP on your FortiGate Put the following telegraf config in your /etc/telegraf/telegraf.d directory Edit the the agent IP and community string as appropriate # # Retrieves SNMP values from remote agents [[inputs.snmp]] agents = [ "192.168.1.1:161" ] timeout = "10s" retries = 3 version = 2 community = "monitoring" # ## SNMPv3 auth parameters sec_name = "sec_name" auth_protocol = "SHA" # Values: "MD5", "SHA", "" auth_password = "auth_pass" sec_level = "authPriv" # Values: "noAuthNoPriv", "authNoPriv", "authPriv" # #context_name = "" priv_protocol = "AES" # Values: "DES", "AES", "" priv_password = "priv_pass" name = "FortiGate" [[inputs.snmp.field]] name = "hostname" oid = "SNMPv2-MIB::sysName.0" [[inputs.snmp.field]] name = "sysLocation" oid = "SNMPv2-MIB::sysLocation.0" [[inputs.snmp.field]] name = "uptime" oid = "DISMAN-EXPRESSION-MIB::sysUpTimeInstance.0" [[inputs.snmp.field]] name = "fnSysSerial" oid = "FORTINET-CORE-MIB::fnSysSerial.0" [[inputs.snmp.field]] name = "fgSysVersion" oid = "FORTINET-FORTIGATE-MIB::fgSysVersion.0" [[inputs.snmp.field]] name = "fgSysUpTime" oid = "FORTINET-FORTIGATE-MIB::fgSysUpTime.0" [[inputs.snmp.field]] name = "fgSysMemUsage" oid = "FORTINET-FORTIGATE-MIB::fgSysMemUsage.0" [[inputs.snmp.field]] name = "fgSysCpuUsage" oid = "FORTINET-FORTIGATE-MIB::fgSysCpuUsage.0" [[inputs.snmp.field]] name = "fgSysMemCapacity" oid = "FORTINET-FORTIGATE-MIB::fgSysMemCapacity.0" [[inputs.snmp.field]] name = "fgSysDiskUsage" oid = "FORTINET-FORTIGATE-MIB::fgSysDiskUsage.0" [[inputs.snmp.field]] name = "fgSysDiskCapacity" oid = "FORTINET-FORTIGATE-MIB::fgSysDiskCapacity.0" [[inputs.snmp.field]] name = "fgSysSesCount" oid = "FORTINET-FORTIGATE-MIB::fgSysSesCount.0" [[inputs.snmp.field]] name = "fgSysLowMemUsage" oid = "FORTINET-FORTIGATE-MIB::fgSysLowMemUsage.0" [[inputs.snmp.field]] name = "fgSysLowMemCapacity" oid = "FORTINET-FORTIGATE-MIB::fgSysLowMemCapacity.0" # IF-MIB::ifXTable contains newer High Capacity (HC) counters that do not overflow as fast for a few of the ifTable counters [[inputs.snmp.table]] name = "FortiGate-interface" # Interface tag - used to identify interface in metrics database [[inputs.snmp.table.field]] name = "ifName" oid = "IF-MIB::ifName" is_tag = true [[inputs.snmp.table.field]] name = "ifHCOutOctets" oid = "IF-MIB::ifHCOutOctets" [[inputs.snmp.table.field]] name = "ifHCInOctets" oid = "IF-MIB::ifHCInOctets" #FORTINET-FORTIGATE-MIB::fgVdTable [[inputs.snmp.table]] name = "FORTINET-FORTIGATE-MIB::fgVdTable" inherit_tags = [ "hostname" ] oid = "FORTINET-FORTIGATE-MIB::fgVdTable" #FORTINET-FORTIGATE-MIB::fgVdEntName [[inputs.snmp.table.field]] name = "fgVdEntName" oid = "FORTINET-FORTIGATE-MIB::fgVdEntName" is_tag = true #VPN [[inputs.snmp.table]] ## measurement name name = "fgVpnTun" [[inputs.snmp.table.field]] name = "fgVpnTunEntPhase1Name" oid = "FORTINET-FORTIGATE-MIB::fgVpnTunEntPhase1Name" is_tag = true [[inputs.snmp.table.field]] name = "fgVpnTunEntPhase2Name" oid = "FORTINET-FORTIGATE-MIB::fgVpnTunEntPhase2Name" is_tag = true [[inputs.snmp.table.field]] name = "fgVpnTunEntInOctets" oid = "FORTINET-FORTIGATE-MIB::fgVpnTunEntInOctets" [[inputs.snmp.table.field]] name = "fgVpnTunEntOutOctets" oid = "FORTINET-FORTIGATE-MIB::fgVpnTunEntOutOctets" [[inputs.snmp.table.field]] name = "fgVpnTunEntStatus" oid = "FORTINET-FORTIGATE-MIB::fgVpnTunEntStatus" #HA [[inputs.snmp.table]] ## measurement name name = "fgHaStats" [[inputs.snmp.table.field]] name = "fgHaStatsHostname" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsHostname" is_tag = true [[inputs.snmp.table.field]] name = "fgHaStatsSyncStatus" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsSyncStatus" [[inputs.snmp.table.field]] name = "fgHaStatsCpuUsage" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsCpuUsage" [[inputs.snmp.table.field]] name = "fgHaStatsSerial" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsSerial" [[inputs.snmp.table.field]] name = "fgHaStatsMemUsage" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsMemUsage" [[inputs.snmp.table.field]] name = "fgHaStatsNetUsage" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsNetUsage" [[inputs.snmp.table.field]] name = "fgHaStatsSesCount" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsSesCount" [[inputs.snmp.table.field]] name = "fgHaStatsPktCount" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsPktCount" [[inputs.snmp.table.field]] name = "fgHaStatsByteCount" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsByteCount" [[inputs.snmp.table.field]] name = "fgHaStatsIdsCount" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsIdsCount" [[inputs.snmp.table.field]] name = "fgHaStatsAvCount" oid = "FORTINET-FORTIGATE-MIB::fgHaStatsAvCount"

June 21, 2020 ยท Dennis Kruyt