Hello,
We are using a template for FortiGate firewalls that has a trigger prototype for processor utilization:
last(/ZBX-FORTINET-CPU/fgProcessorUsage5sec.["{#SNMPINDEX}"])>80
Which equates to: If the processor utilization is over 80% for 5 seconds, fire.
I would like to clone this trigger prototype and modify it slightly. I want to fire if that value is 80% or greater for the last 30 minutes. Seems like the min function would be perfect for that, but I can't seem to get the syntax right.
((/ZBX-FORTINET-CPU/fgProcessorUsage5sec.["{#SNMPINDEX}"]).min(30))>80
That gives me this message: Invalid parameter "/1/expression": incorrect expression starting from "/ZBX-FORTINET-CPU/fgProcessorUsage5sec.["{#SNMPINDEX}"].min(30))>80".
Can anyone help me with the proper syntax?
Thanks.
Bryan Hunt
We are using a template for FortiGate firewalls that has a trigger prototype for processor utilization:
last(/ZBX-FORTINET-CPU/fgProcessorUsage5sec.["{#SNMPINDEX}"])>80
Which equates to: If the processor utilization is over 80% for 5 seconds, fire.
I would like to clone this trigger prototype and modify it slightly. I want to fire if that value is 80% or greater for the last 30 minutes. Seems like the min function would be perfect for that, but I can't seem to get the syntax right.
((/ZBX-FORTINET-CPU/fgProcessorUsage5sec.["{#SNMPINDEX}"]).min(30))>80
That gives me this message: Invalid parameter "/1/expression": incorrect expression starting from "/ZBX-FORTINET-CPU/fgProcessorUsage5sec.["{#SNMPINDEX}"].min(30))>80".
Can anyone help me with the proper syntax?
Thanks.
Bryan Hunt