--- title: Fortinet FortiManager description: Monitor your FortiGate Devices with Network Device Monitoring and Logs breadcrumbs: Docs > Integrations > Fortinet FortiManager --- > For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt). # Fortinet FortiManager Integration version1.1.0 {% callout %} # Important note for users on the following Datadog sites: us2.ddog-gov.com {% alert level="info" %} To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator. To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com). {% /alert %} {% /callout %} Fortinet FortiManager Overview Dashboard ## Overview{% #overview %} This integration offers visibility into your Fortinet environment by collecting metrics for SD-WAN, device performance, and traffic logs, for [Network Device Monitoring](https://app.datadoghq.com/devices). **SD-WAN Performance Monitoring** SD-WAN Performance Monitoring provides insights into the overall health and performance of your Fortinet SD-WAN infrastructure, allowing for proactive management and quick identification of issues impacting network performance. With automatic discovery of FortiGate devices, this integration pulls in metadata to enable detailed analysis by location, device type, and other dimensions. **Device Health Monitoring** Device Health Monitoring tracks the status and resource utilization of FortiGate devices managed by FortiManager, ensuring optimal device performance and availability across your network infrastructure. **Security Analytics** Security Analytics provides detailed visibility into security events and traffic patterns, helping to identify threats and ensure compliance with security policies. **Logs** In addition to metrics, alert and traffic logs can be collected. Search your Datadog logs with `source:fortinet-fortimanager`. If you installed the integration correctly, you should be able to see Fortinet event and traffic logs from FortiGate devices. ## Setup{% #setup %} ### Installation{% #installation %} 1. In Datadog, open the [Fortinet FortiManager integration tile](https://app.datadoghq.com/integrations/fortinet-fortimanager). 1. Click **Add Account**. 1. Choose a name for your FortiManager account. 1. Follow the instructions below to configure the integration. ### Configuration{% #configuration %} **Create a FortiManager JSON API Admin** 1. Log in to your FortiManager instance. 1. Navigate to **System Settings** and then **Admin Profiles**. 1. Select **Create New** to create a new admin profile with a type of **System Admin** and assign **Read-Only** permissions to all of the options. 1. Navigate to **Administrators** and then select **+ Create New** and choose **Administrator**. 1. Assign the admin profile created earlier to this user and save the username and password to a secure location. These credentials are required to set up the integration in Datadog. **Find Your API Host** Locate the API Host by checking the URL of your FortiManager. It could be an IP address or a custom domain. {% alert level="info" %} Certain IP address prefixes must be allow-listed for Datadog to collect data from your Fortimanager account. The list of IP prefixes belonging to Datadog can be found in the IP ranges page, and the range to allow can be found under **webhooks**. {% /alert %} **Metrics and Event Logs Collection** 1. Enter a unique identifying name for the FortiManager account in Datadog. 1. Paste in the API Host, username, and password obtained in the steps above. This enables Datadog to collect metrics and event logs. ## Data Collected{% #data-collected %} ### Metrics{% #metrics %} | | | | | **fortimanager.device.status**(gauge) | Status of the FortiGate as reported by FortiManager (1 = up, 0 = down). | | **fortimanager.device.uptime**(gauge) | Time since the FortiGate last rebooted.*Shown as second* | | **fortimanager.device.cpu.percent_used**(gauge) | FortiGate CPU utilization.*Shown as percent* | | **fortimanager.device.mem.percent_used**(gauge) | FortiGate memory utilization.*Shown as percent* | | **fortimanager.device.disk.percent_used**(gauge) | FortiGate system disk utilization.*Shown as percent* | | **fortimanager.device.disk.free_bytes**(gauge) | Free space on the FortiGate system disk.*Shown as byte* | | **fortimanager.device.disk.used_bytes**(gauge) | Used space on the FortiGate system disk.*Shown as byte* | | **fortimanager.device.disk.total_bytes**(gauge) | Total size of the FortiGate system disk.*Shown as byte* | | **fortimanager.device.log.disk.percent_used**(gauge) | FortiGate log partition utilization.*Shown as percent* | | **fortimanager.device.log.disk.free_bytes**(gauge) | Free space on the FortiGate log partition.*Shown as byte* | | **fortimanager.device.log.disk.used_bytes**(gauge) | Used space on the FortiGate log partition.*Shown as byte* | | **fortimanager.device.log.disk.total_bytes**(gauge) | Total size of the FortiGate log partition.*Shown as byte* | | **fortimanager.device.log.disk_lograte**(gauge) | Local disk logging rate. | | **fortimanager.device.log.faz_lograte**(gauge) | FortiAnalyzer logging rate. | | **fortimanager.device.log.faz_cloud_lograte**(gauge) | FortiAnalyzer Cloud logging rate. | | **fortimanager.device.log.forticloud_lograte**(gauge) | FortiCloud logging rate. | | **fortimanager.device.session.current**(gauge) | Current active IPv4 sessions.*Shown as connection* | | **fortimanager.device.session6.current**(gauge) | Current active IPv6 sessions.*Shown as connection* | | **fortimanager.device.setuprate**(gauge) | IPv4 session setup rate.*Shown as connection* | | **fortimanager.device.setuprate6**(gauge) | IPv6 session setup rate.*Shown as connection* | | **fortimanager.device.npu_session.current**(gauge) | Current NPU-offloaded IPv4 sessions.*Shown as connection* | | **fortimanager.device.npu_session6.current**(gauge) | Current NPU-offloaded IPv6 sessions.*Shown as connection* | | **fortimanager.device.gtp_tunnel.count**(gauge) | Active GTP tunnels. | | **fortimanager.device.gtp_tunnel.setup_rate**(gauge) | GTP tunnel setup rate. | | **fortimanager.device.dns_latency**(gauge) | DNS resolution latency measured by the FortiGate.*Shown as second* | | **fortimanager.device.interface.rx_bytes**(gauge) | Bytes received on the interface.*Shown as byte* | | **fortimanager.device.interface.tx_bytes**(gauge) | Bytes transmitted on the interface.*Shown as byte* | | **fortimanager.device.interface.rx_packets**(gauge) | Packets received on the interface.*Shown as packet* | | **fortimanager.device.interface.tx_packets**(gauge) | Packets transmitted on the interface.*Shown as packet* | | **fortimanager.device.interface.rx_errors**(count) | Receive errors on the interface.*Shown as error* | | **fortimanager.device.interface.tx_errors**(count) | Transmit errors on the interface.*Shown as error* | | **fortimanager.device.interface.speed**(gauge) | Configured interface speed.*Shown as megabit* | | **fortimanager.device.interface.status**(gauge) | Interface link status (1 = up, 0 = down). | | **fortimanager.device.sdwan_sla.jitter**(gauge) | SD-WAN SLA jitter.*Shown as millisecond* | | **fortimanager.device.sdwan_sla.latency**(gauge) | SD-WAN SLA latency.*Shown as millisecond* | | **fortimanager.device.sdwan_sla.packet_loss**(gauge) | SD-WAN SLA packet loss.*Shown as percent* | | **fortimanager.device.health_check.jitter**(gauge) | SD-WAN health-check jitter.*Shown as millisecond* | | **fortimanager.device.health_check.latency**(gauge) | SD-WAN health-check latency.*Shown as millisecond* | | **fortimanager.device.health_check.packet_loss**(gauge) | SD-WAN health-check packet loss.*Shown as percent* | | **fortimanager.device.health_check.packet_sent**(count) | Health-check probe packets sent.*Shown as packet* | | **fortimanager.device.health_check.packet_received**(count) | Health-check probe packets received.*Shown as packet* | | **fortimanager.device.health_check.status**(gauge) | SD-WAN health-check status (1 = up, 0 = down). | | **fortimanager.device.health_check.rx_bandwidth**(gauge) | Health-check measured receive bandwidth.*Shown as bit* | | **fortimanager.device.health_check.tx_bandwidth**(gauge) | Health-check measured transmit bandwidth.*Shown as bit* | | **fortimanager.device.link_monitor.up**(gauge) | Link monitor status (1 = up, 0 = down). | | **fortimanager.device.link_monitor.jitter**(gauge) | Link monitor jitter.*Shown as millisecond* | | **fortimanager.device.link_monitor.latency**(gauge) | Link monitor latency.*Shown as millisecond* | | **fortimanager.device.link_monitor.packet_loss**(gauge) | Link monitor packet loss.*Shown as percent* | | **fortimanager.device.link_monitor.packet_sent**(count) | Link monitor packets sent.*Shown as packet* | | **fortimanager.device.link_monitor.packet_received**(count) | Link monitor packets received.*Shown as packet* | | **fortimanager.device.traffic.bytes_total**(gauge) | Total traffic bytes (by application or destination).*Shown as byte* | | **fortimanager.device.traffic.bytes_sent**(gauge) | Traffic bytes sent.*Shown as byte* | | **fortimanager.device.traffic.bytes_received**(gauge) | Traffic bytes received.*Shown as byte* | | **fortimanager.device.traffic.sessions_total**(gauge) | Total traffic sessions.*Shown as connection* | | **fortimanager.device.traffic.sessions_allowed**(gauge) | Allowed traffic sessions.*Shown as connection* | | **fortimanager.device.traffic.sessions_blocked**(gauge) | Blocked traffic sessions.*Shown as connection* | | **fortimanager.device.vpn.ipsec.tunnel.up**(gauge) | IPsec tunnel status (1 = up, 0 = down). | | **fortimanager.device.vpn.ipsec.tunnel.uptime**(gauge) | IPsec tunnel uptime.*Shown as second* | | **fortimanager.device.vpn.ipsec.tunnel.incoming_bytes**(gauge) | IPsec tunnel bytes received.*Shown as byte* | | **fortimanager.device.vpn.ipsec.tunnel.outgoing_bytes**(gauge) | IPsec tunnel bytes sent.*Shown as byte* | | **fortimanager.device.vpn.ipsec.tunnel.connection_count**(gauge) | IPsec tunnel connection count. | | **fortimanager.device.vpn.ssl.sessions.active**(gauge) | Active SSL-VPN sessions.*Shown as connection* | | **fortimanager.device.vpn.ssl.sessions.tunnel_count**(gauge) | SSL-VPN tunnel count. | | **fortimanager.device.routing.bgp.state**(gauge) | BGP neighbor session state. | | **fortimanager.device.routing.bgp.msgs_rcvd**(gauge) | BGP messages received from the neighbor. | | **fortimanager.device.routing.bgp.msgs_sent**(gauge) | BGP messages sent to the neighbor. | | **fortimanager.device.routing.bgp.prefix_count**(gauge) | BGP prefixes received from the neighbor. | | **fortimanager.device.firewall.policy.bytes**(gauge) | Bytes matched by the firewall policy.*Shown as byte* | | **fortimanager.device.firewall.policy.packets**(gauge) | Packets matched by the firewall policy.*Shown as packet* | | **fortimanager.device.firewall.policy.hit_count**(gauge) | Firewall policy hit count. | | **fortimanager.device.firewall.policy.active_sessions**(gauge) | Active sessions on the firewall policy.*Shown as connection* | | **fortimanager.device.ha.member_count**(gauge) | HA cluster member count. | | **fortimanager.device.ha.is_root_master**(gauge) | Whether this device is the HA root master (1 = yes, 0 = no). | | **fortimanager.device.ha.is_cluster_member**(gauge) | Whether this device is an HA cluster member (1 = yes, 0 = no). | | **fortimanager.device.ha.config_sync.in_sync**(gauge) | Whether HA configuration sync is in sync (1 = yes, 0 = no). | | **fortimanager.device.csf.member_count**(gauge) | Security Fabric member count. | | **fortimanager.device.csf.protocol_enabled**(gauge) | Whether the Security Fabric protocol is enabled (1 = yes, 0 = no). | | **fortimanager.device.fortiguard.servers_total**(gauge) | Total configured FortiGuard servers. | | **fortimanager.device.fortiguard.servers_reachable**(gauge) | Reachable FortiGuard servers. | | **fortimanager.device.sdn_connector.up**(gauge) | SDN connector status (1 = up, 0 = down). | | **fortimanager.device.security_rating.score**(gauge) | FortiGate Security Rating score. | | **fortimanager.device.security_rating.points**(gauge) | FortiGate Security Rating points. | | **fortimanager.device.security_rating.percentage**(gauge) | FortiGate Security Rating percentage.*Shown as percent* | | **fortimanager.device.sensor.value**(gauge) | Hardware sensor reading (temperature, fan, voltage). | | **fortimanager.device.sensor.alarm**(gauge) | Hardware sensor alarm state (1 = alarm, 0 = normal). | | **fortimanager.management_device.cpu**(gauge) | FortiManager appliance CPU utilization.*Shown as percent* | | **fortimanager.management_device.memory**(gauge) | FortiManager appliance memory utilization.*Shown as percent* | | **fortimanager.management_device.hard_disk**(gauge) | FortiManager appliance hard-disk utilization.*Shown as percent* | | **fortimanager.management_device.flash_disk**(gauge) | FortiManager appliance flash-disk utilization.*Shown as percent* | ### Logs{% #logs %} This integration also collects alert and event logs including: - FortiGate Device Status Events - Security Policy Events - VPN Status Events - System Configuration Events - User Authentication Events - Threat Detection Events - Traffic Analysis Logs ### Service Checks{% #service-checks %} FortiNet FortiManager does not include any service checks. ### Events{% #events %} FortiNet FortiManager does not include any events. ## Troubleshooting{% #troubleshooting %} Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).