topic Re: Fortigate extension doesnt show device information in Extensions

Fortigate extension doesn't show device information

MariettaAlmeida — Mon, 19 Aug 2024 13:09:56 GMT

hi all,

we've configured Fortigate WAF through activeGate extension Fortinet Fortigate monitoring & observability | Dynatrace Hub and aafter one day of being configured with "OK", the information doesnt appear in the tenant:

we haven't had problems on istallation, we created a user with "read" permissions to connect.

Re: Fortigate extension doesnt show device information

radek_jasinski — Fri, 05 Jan 2024 08:50:20 GMT

Hi @MariettaAlmeida

This is not a valid view, as it should include metrics. There could be many reasons for this. To start with, I would verify that you have the right network passes after the API to the devices.
Secondly download the logs from AG and analyse them.

Radek

Re: Fortigate extension doesnt show device information

MariettaAlmeida — Tue, 09 Jan 2024 07:50:35 GMT

is this view helpful? we configured communication through port 443 between activeGate en waf and created a user with read permissions. the logs says:

[query] Ping result: {'destination': None, 'packet_transmit': None, 'packet_receive': None, 'packet_loss_count': None, 'packet_loss_rate': None, 'rtt_min': None, 'rtt_avg': None, 'rtt_max': None, 'rtt_mdev': None, 'packet_duplicate_count': None, 'packet_duplicate_rate': None}

2024-01-03 17:06:00.741 UTC INFO [Python][5399398600470773862][FortiPrin][140642611086912][ThreadPoolExecutor-0_0] - [make_request] Making request to 'https://1xxxx:20443/login/logincheck'
2024-01-03 17:06:10.758 UTC ERROR [Python][5399398600470773862][FortiPrin][140642611086912][ThreadPoolExecutor-0_0] - [make_request] Error calling https://10.10.1.10:20443/login/logincheck: HTTPSConnectionPool(host='10xxxx', port=20443): Max retries exceeded with url: /login/logincheck?username=dynatrace&secretkey=.8G%2Br%2AUC03 (Caused by ConnectTimeoutError(<urllib3.connection.HTTPSConnection object at 0x7fe9c5274b20>, 'Connection to 10.10.1.10 timed out. (connect timeout=10)'))
2024-01-03 17:06:10.758 UTC INFO [Python][5399398600470773862][FortiPrin][140642611086912][ThreadPoolExecutor-0_0] - [make_request] Making request to 'https://10.10.1.10:20443/login/api/v2/monitor/system/status/select'
2024-01-03 17:06:20.762 UTC ERROR [Python][5399398600470773862][FortiPrin][140642611086912][ThreadPoolExecutor-0_0] - [make_request] Error calling https://10.10.1.10:20443/login/api/v2/monitor/system/status/select: HTTPSConnectionPool(host='10.10.1.10', port=20443): Max retries exceeded with url: /login/api/v2/monitor/system/status/select?scope=global (Caused by ConnectTimeoutError(<urllib3.connection.HTTPSConnection object at 0x7fe9c5274a60>, 'Connection to 10.10.1.10 timed out. (connect timeout=10)'))
2024-01-03 17:06:20.763 UTC ERROR [Python][5399398600470773862][FortiPrin][140642611086912][ThreadPoolExecutor-0_0] - [query] Could not connect or obtain metrics: 'NoneType' object has no attribute 'json'

Re: Fortigate extension doesnt show device information

AntonPineiro — Fri, 05 Jan 2024 18:42:39 GMT

Hi,

Looks like a communication issue between your ActiveGate and target.

Best regards

Re: Fortigate extension doesnt show device information

DanielS — Fri, 05 Jan 2024 21:18:18 GMT

Hi @MariettaAlmeida . I have documented the same issue.

https://community.dynatrace.com/t5/Extensions/Fortinet-Fortigate-custom-extension/m-p/187719

For this case a support ticket would be the best approach, if you have new please share it with the community.

Please check @jegron tip

Re: Fortigate extension doesnt show device information

MariettaAlmeida — Mon, 08 Jan 2024 13:58:15 GMT

we did a connectivity test, no problem there