bluecmd / fortigate_exporter

Prometheus exporter for Fortigate firewalls
GNU General Public License v3.0
235 stars 76 forks source link

No Data Retrieved from FortiGate #211

Open mrcitizenkane opened 1 year ago

mrcitizenkane commented 1 year ago

Running latest version of fortigate_explorer in container. Prometheus shows Target is up and no errors. I have verified the API Key works and has enough permissions. However, I am not seeing any data scraped/collected via Grafana.

Fortigate v7.0.9

Probe output:

HELP probe_duration_seconds How many seconds the probe took to complete

TYPE probe_duration_seconds gauge

probe_duration_seconds 0.012219623

HELP probe_success Whether or not the probe succeeded

TYPE probe_success gauge

probe_success 0 <-- does this mean not successful? 0?

/metrics shows: net_conntrack_dialer_conn_failed_total{dialer_name="fortigate_exporter",reason="unknown"} 116

Should there be any issues due to FortiGate version?

Also have concerns with the comments noted in the example admin profile config referencing single vdom and "as of FortiOS" comments.

config system accprofile edit "monitor" # global scope will fail on non multi-VDOM firewall set scope global set authgrp read

As of FortiOS 6.2.1 it seems fwgrp-permissions.other is removed,

    # use 'fwgrp read' to get load balance servers metrics
    set fwgrp custom
    set loggrp custom
    set netgrp custom
    set sysgrp custom
    set vpngrp read
    set wifi read
    **# will fail for most recent FortiOS**
    set system-diagnostics disable
    config fwgrp-permission
        set policy read
        set others read
    end
    config netgrp-permission
        set cfg read
        set route-cfg read
    end
    config loggrp-permission
        set config read
    end
    config sysgrp-permission
        set cfg read
    end
next

end

mohammed-mustafa123 commented 1 year ago

Hi, I'm about to implement this but don't know where to start from would appreciate your guidance. Regards,

bluecmd commented 1 year ago

What's your Prometheus and exporter config?