Home

> Administration > Device support > Creating Custom Performance Monitors

Creating Custom Performance Monitors

Creating a custom performance monitor involves creating a performance object that specifies the monitoring access protocol to use, mapping event attributes available for that protocol to FortiSIEM event attribute types, and then associating those attributes to an event type. You can use system or user-defined device types, event attribute types, and event types when creating the performance object.

This section provides the procedure to configure Performance Monitors.

Adding a performance monitor

  1. Go to ADMIN > Device Support > Monitoring.
  2. Click New and enter the information with reference to the table below:

    SettingsGuidelines
    NameName of this performance object (for reference purposes)
    TypeWhether the performance object is for monitoring a System-level metric or an Application-level metric.
    MethodMethod to collect this performance object (WMI).
    Parent ClassWMI metrics are defined in the form of a parent class (for example, Win32_ComputerSystem) having multiple attributes (e.g. Domain, TotalPhysicalMemory etc.)
    List of AttributesIndividual attributes that has to be monitored.
    Event TypeFor this performance object: Associate an event type from drop down (must be pre-created).
    Polling frequencySpecifies how often this performance object must be polled.
    DescriptionDescription of this performance object
  3. Click Save.
  4. Under Enter Device Type to Performance Object Mapping, click New
  5. Enter a Name for the mapping. 
  6. Select the Device Type to which you want to apply the monitor. 
    Whenever a device belonging to the selected device type is discovered, FortiSIEM will attempt to apply the performance monitor to it. 
  7. Select the Perf Objects.
  8. Click Save

After you have successfully tested and applied the Performance Monitor, initiate discovery of the device that it will monitor, and ensure that the new monitor is enabled.

Testing a performance monitor

  1. Go to ADMIN > Device Support > Monitoring.
  2. Select the performance monitor.
  3. Click Test.
  4. For IP Address, enter the IP address of the device that you want to use to test the monitor. 
  5. Click Test.
  6. If the test succeeds, click Close, and click Apply to register the new monitor with the back-end module.

Modifying a performance monitor

Follow the procedure below to modify performance monitor:

  1. Select one or more performance monitor(s) from the list.
  2. Click the required option from the following table.
    • Edit to modify any performance monitor setting.
    • Delete to delete a performance monitor.
  3. Click Save.