fortios_monitor_fact – Retrieve Facts of FortiOS Monitor Objects.¶
New in version 2.10.
Synopsis¶
- Collects monitor facts from network devices running the fortios operating system. This facts module will only collect those facts which user specified in playbook.
Requirements¶
The below requirements are needed on the host that executes this module.
- install galaxy collection fortinet.fortios >=
2.0.0
.
Parameters¶
- vdom - Virtual domain, among those defined previously. A vdom is a virtual instance of the FortiGate that can be configured and used as a different unit. type: str required: False default: root
- enable_log - Enable/Disable logging for task. type: bool required: False default: False
- access_token - Token-based authentication. Generated from GUI of Fortigate. type: str required: False
- filters - A list of expressions to filter the returned results. type: list required: False more...
- sorters - A list of expressions to sort the returned results. type: list required: False more...
- formatters - A list of fields to display for returned results. type: list required: False
- selector - selector of the retrieved fortigate facts type: str choices:
-
azure_application-list
- azure_application-list endpoint-control_avatar_download
- endpoint-control_avatar_download - Download an endpoint avatar image.
- uid - Single FortiClient UID. type: string required: False
- user - User name of the endpoint. type: string required: False
- fingerprint - Avatar fingerprint. type: string required: False
- default - Default avatar name ['authuser'|'unauthuser'|'authuser_72'|'unauthuser_72']. Default avatar when endpoint / device avatar is not available. If default is not set, Not found 404 is returned. type: string required: False
endpoint-control_ems_cert-status
- endpoint-control_ems_cert-status - Retrieve authentication status of the EMS server certificate for a specific EMS.
- ems_id - EMS server ID (as defined in CLI table endpoint-control.fctems). type: int required: True
- with_cert - Return detailed certificate information. Available when the certificate is authenticated by installed CA certificates. type: boolean required: False
endpoint-control_ems_status
- endpoint-control_ems_status - Retrieve EMS connection status for a specific EMS.
- ems_id - EMS server ID (as defined in CLI table endpoint-control.fctems). type: int required: False
endpoint-control_ems_status-summary
- endpoint-control_ems_status-summary endpoint-control_installer
- endpoint-control_installer - List available FortiClient installers.
- min_version - Filter: Minimum installer version. (String of the format n[.n[.n]]). type: string required: False
endpoint-control_installer_download
- endpoint-control_installer_download - Download a FortiClient installer via FortiGuard.
- mkey - Name of installer (image_id). type: string required: True
endpoint-control_profile_xml
- endpoint-control_profile_xml - List XML representation for each endpoint-control profile.
- mkey - Name of endpoint-control profile. type: string required: False
endpoint-control_record-list
- endpoint-control_record-list - List endpoint records. This should only be used when you need to retrieve endpoint information from FortiEMS.
- intf_name - Filter: Name of interface where the endpoint was detected. type: string required: False
endpoint-control_registration_summary
- endpoint-control_registration_summary endpoint-control_summary
- endpoint-control_summary extender-controller_extender
- extender-controller_extender - Retrieve statistics for specific configured FortiExtender units.
- name - Filter: list of FortiExtender names. To be deprecated in FortiOS v7.4.0. type: array required: False
- fortiextender-name - Filter: list of FortiExtender name. Retrieve statistics for all configured FortiExtender units unless specified. type: array required: False
- type - Statistic type.'type' options are [system | modem | usage | last]. If 'type' is not specified, all types of statistics are retrieved. type: string required: False
firewall_acl
- firewall_acl firewall_acl6
- firewall_acl6 firewall_address-dynamic
- firewall_address-dynamic - List of Fabric Connector address objects and the IPs they resolve to.
- mkey - Name of the dynamic address to retrieve. If this is not provided, all dynamic addresses will be retrieved. type: string required: False
firewall_address-fqdns
- firewall_address-fqdns firewall_address-fqdns6
- firewall_address-fqdns6 firewall_address6-dynamic
- firewall_address6-dynamic - List of IPv6 Fabric Connector address objects and the IPs they resolve to.
- mkey - Name of the dynamic address to retrieve. If this is not provided, all dynamic addresses will be retrieved. type: string required: False
firewall_central-snat-map
- firewall_central-snat-map - List traffic statistics for firewall central SNAT policies.
- policyid - Filter: Policy ID. type: int required: False
- ip_version - Filter: Traffic IP Version. [ ipv4 | ipv6 ], if left empty, will retrieve data for both IPv4 and IPv6. type: string required: False
firewall_consolidated-policy
- firewall_consolidated-policy - List traffic statistics for consolidated policies.
- policyid - Filter: Policy ID. type: int required: False
firewall_dnat
- firewall_dnat - List hit count statistics for firewall virtual IP/server.
- uuid - Filter: Virtual IP's UUID. type: string required: False
- ip_version - Filter: Traffic IP Version. [ ipv4 | ipv6 ], if left empty, will retrieve data for both IPv4 and IPv6. type: string required: False
firewall_gtp
- firewall_gtp firewall_gtp-runtime-statistics
- firewall_gtp-runtime-statistics firewall_gtp-statistics
- firewall_gtp-statistics firewall_health
- firewall_health firewall_internet-service-basic
- firewall_internet-service-basic firewall_internet-service-details
- firewall_internet-service-details - List all details for a given Internet Service ID.
- id - ID of the Internet Service to get details for. type: int required: True
- country_id - Filter: Country ID. type: int required: False
- region_id - Filter: Region ID. type: int required: False
- city_id - Filter: City ID. type: int required: False
- start - Starting entry index. If a value is less than zero, it will be set to zero. type: int required: False
- count - Maximum number of entries to return. Valid range is [20, 1000]; if a value is specified out of that range, it will be rounded up or down. Default value is 1000. type: int required: False
- summary_only - Only return number of entries instead of entries. type: boolean required: False
firewall_internet-service-match
- firewall_internet-service-match - List internet services that exist at a given IP or Subnet.
- ip - IP (in dot-decimal notation). type: string required: True
- mask - IP Mask (in dot-decimal notation). type: string required: True
firewall_internet-service-reputation
- firewall_internet-service-reputation - List internet services with reputation information that exist at a given IP.
- ip - IP (in dot-decimal notation). type: string required: True
firewall_ippool
- firewall_ippool firewall_ippool_mapping
- firewall_ippool_mapping - Get the list of IPv4 mappings for the specified IP pool.
- mkey - The IP pool name. type: string required: True
firewall_load-balance
- firewall_load-balance - List all firewall load balance servers.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: True
firewall_local-in
- firewall_local-in firewall_multicast-policy
- firewall_multicast-policy - List traffic statistics for IPv4 firewall multicast policies.
- policyid - Filter: Policy ID. type: int required: False
firewall_multicast-policy6
- firewall_multicast-policy6 - List traffic statistics for IPv6 firewall multicast policies.
- policyid - Filter: Policy ID. type: int required: False
firewall_network-service-dynamic
- firewall_network-service-dynamic - List of dynamic network service IP address and port pairs.
- mkey - Name of the dynamic network service entry. type: string required: True
firewall_per-ip-shaper
- firewall_per-ip-shaper firewall_policy
- firewall_policy - List traffic statistics for firewall policies.
- policyid - Filter: Policy ID. type: int required: False
- ip_version - Filter: Traffic IP Version. [ ipv4 | ipv6 ], if left empty, will retrieve data for both ipv4 and ipv6. type: string required: False
firewall_policy-lookup
- firewall_policy-lookup - Performs a policy lookup by creating a dummy packet and asking the kernel which policy would be hit.
- ipv6 - Perform an IPv6 lookup? type: boolean required: False
- srcintf - Source interface. type: string required: True
- sourceport - Source port. type: int required: False
- sourceip - Source IP. type: string required: False
- protocol - Protocol. type: string required: True
- dest - Destination IP/FQDN. type: string required: True
- destport - Destination port. type: int required: False
- icmptype - ICMP type. type: int required: False
- icmpcode - ICMP code. type: int required: False
firewall_policy6
- firewall_policy6 - List traffic statistics for IPv6 policies.
- policyid - Filter: Policy ID. type: int required: False
firewall_proxy-policy
- firewall_proxy-policy - List traffic statistics for all explicit proxy policies.
- policyid - Filter: Policy ID. type: int required: False
firewall_proxy_sessions
- firewall_proxy_sessions - List all active proxy sessions (optionally filtered).
- ip_version - IP version [*ipv4 | ipv6 | ipboth]. type: string required: False
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. Valid range is [20, 1000]; if a value is specified out of that range, it will be rounded up or down. type: int required: True
- summary - Enable/disable inclusion of session summary (setup rate, total sessions, etc). type: boolean required: False
- srcaddr - Source IPv4 address. type: object required: False
- dstaddr - Destination IPv4 address. type: object required: False
- srcaddr6 - Source IPv6 address. type: object required: False
- dstaddr6 - Destination IPv6 address. type: object required: False
- srcport - Source TCP port number. type: object required: False
- dstport - Destination TCP port number. type: object required: False
- srcintf - Source interface name. type: object required: False
- dstintf - Destination interface name. type: object required: False
- policyid - Firewall policy ID. type: object required: False
- proxy-policyid - Explicit proxy policy ID. type: object required: False
- protocol - Protocol type. type: object required: False
- application - Web application type. type: object required: False
- country - Geographic location. type: object required: False
- seconds - Time in seconds, since the session is established. type: object required: False
- since - Time when the session is established. type: object required: False
- owner - Owner. type: object required: False
- username - Session login user name. type: object required: False
- src_uuid - UUID of source. type: object required: False
- dst_uuid - UUID of destination. type: object required: False
firewall_sdn-connector-filters
- firewall_sdn-connector-filters - List all available filters for a specified SDN Fabric Connector. Used for Fabric Connector address objects.
- connector - Name of the SDN Fabric Connector to get the filters from. type: string required: True
firewall_security-policy
- firewall_security-policy - List IPS engine statistics for security policies.
- policyid - Filter: Policy ID. type: int required: False
firewall_session
- firewall_session - List all active firewall sessions (optionally filtered).
- ip_version - IP version [*ipv4 | ipv6 | ipboth]. type: string required: False
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. Valid range is [20, 1000]; if a value is specified out of that range, it will be rounded up or down. type: int required: True
- summary - Enable/disable inclusion of session summary (setup rate, total sessions, etc). type: boolean required: False
- sourceport - Filter: Source port. type: int required: False
- policyid - Filter: Policy ID. type: int required: False
- security-policyid - Filter: Security Policy ID. type: int required: False
- application - Filter: Application PROTO/PORT. (e.g. "TCP/443") type: string required: False
- protocol - Filter: Protocol name [all|igmp|tcp|udp|icmp|etc]. type: string required: False
- destport - Filter: Destination port. type: int required: False
- srcintf - Filter: Source interface name. type: string required: False
- dstintf - Filter: Destination interface name. type: string required: False
- srcintfrole - Filter: Source interface roles. type: string required: False
- dstintfrole - Filter: Destination interface roles. type: string required: False
- source - Filter: Source IP address. type: string required: False
- srcuuid - Filter: Source UUID. type: string required: False
- destination - Filter: Destination IP address. type: string required: False
- dstuuid - Filter: Destination UUID. type: string required: False
- username - Filter: Authenticated username. type: string required: False
- shaper - Filter: Forward traffic shaper name. type: string required: False
- country - Filter: Destination country name. type: string required: False
- owner - Filter: Destination owner. type: string required: False
- natsourceaddress - Filter: NAT source address. type: string required: False
- natsourceport - Filter: NAT source port. type: int required: False
- filter-csf - Filter: Include sessions from downstream fortigates. type: boolean required: False
- since - Filter: Only return sessions generated since this Unix timestamp. type: int required: False
- seconds - Filter: Only return sessions generated in the last N seconds. type: int required: False
- web-domain - Filter: Web domain. type: string required: False
- web-category - Filter: Web category. type: string required: False
- fortiasic - Filter: 1 to include NPU accelerated sessions, 0 to exclude. type: int required: False
firewall_shaper
- firewall_shaper firewall_shaper_multi-class-shaper
- firewall_shaper_multi-class-shaper firewall_uuid-list
- firewall_uuid-list firewall_uuid-type-lookup
- firewall_uuid-type-lookup - Retrieve a mapping of UUIDs to their firewall object type for given UUIDs.
- uuids - List of UUIDs to be resolved. type: array required: False
firewall_vip-overlap
- firewall_vip-overlap fortiguard_redirect-portal
- fortiguard_redirect-portal fortiguard_service-communication-stats
- fortiguard_service-communication-stats - Retrieve historical statistics for communication with FortiGuard services.
- service_type - To get stats for [forticare|fortiguard_download|fortiguard_query|forticloud_log|fortisandbox_cloud|fortiguard.com|ocvpn|sdns|fortitoken_registration|sms_service]. Defaults to all stats if not provided. type: string required: False
- timeslot - History timeslot of stats [1_hour|24_hour|1_week]. Defaults to all timeslots if not provided. type: string required: False
fortiview_proxy-statistics
- fortiview_proxy-statistics - Retrieve drill-down and summary data for realtime proxy session FortiView statistics.
- report_by - Report by field. type: string required: False
- sort_by - Sort by field. type: string required: False
- count - Maximum number of details to return. type: int required: False
- ip_version - IP version [*ipv4 | ipv6 | ipboth]. type: string required: False
- srcaddr - Source IPv4 address. type: object required: False
- dstaddr - Destination IPv4 address. type: object required: False
- srcaddr6 - Source IPv6 address. type: object required: False
- dstaddr6 - Destination IPv6 address. type: object required: False
- srcport - Source TCP port number. type: object required: False
- dstport - Destination TCP port number. type: object required: False
- srcintf - Source interface name. type: object required: False
- dstintf - Destination interface name. type: object required: False
- policyid - Firewall policy ID. type: object required: False
- proxy-policyid - Explicit proxy policy ID. type: object required: False
- protocol - Protocol type. type: object required: False
- application - Web application type. type: object required: False
- country - Geographic location. type: object required: False
- seconds - Time in seconds, since the session is established. type: object required: False
- since - Time when the session is established. type: object required: False
- owner - Owner. type: object required: False
- username - Session login user name. type: object required: False
- srcuuid - UUID of source. type: object required: False
- dstuuid - UUID of destination. type: object required: False
fortiview_sandbox-file-details
- fortiview_sandbox-file-details - Retrieve FortiSandbox analysis details for a specific file checksum.
- checksum - Checksum of a specific file that has been analyzed by the connected FortiSandbox. type: string required: True
fortiview_sandbox-file-list
- fortiview_sandbox-file-list fortiview_statistics
- fortiview_statistics - Retrieve drill-down and summary data for FortiView (both realtime and historical).
- realtime - Set to true to retrieve realtime results (from kernel). type: boolean required: False
- filter - A map of filter keys to arrays of values. type: object required: False
- sessionid - FortiView request Session ID. type: int required: False
- count - Maximum number of details to return. type: int required: False
- device - FortiView source device [disk|fortianalyzer|forticloud]. type: string required: False
- report_by - Report by field. type: string required: False
- sort_by - Sort by field. type: string required: False
- chart_only - Only return graph values in results. type: boolean required: False
- start - Start timestamp. type: int required: False
- end - End timestamp. type: int required: False
- ip_version - IP version [*ipv4 | ipv6 | ipboth]. type: string required: False
geoip_geoip-query
- geoip_geoip-query - Retrieve location details for IPs queried against FortiGuard's geoip service.
- ip_addresses - One or more IP address strings to query for location details. type: string required: True
ips_anomaly
- ips_anomaly ips_exceed-scan-range
- ips_exceed-scan-range - Returns a list of applications that exceed the scan range from a list of application IDs.
- ids - List of application IDs. type: array required: True
ips_hold-signatures
- ips_hold-signatures - Return a list of IPS signatures that are on hold due to active hold time.
- ips_sensor - Optional filter: Provide the name of the IPS sensor to retrieve only the hold signatures being used by that sensor. type: string required: False
ips_metadata
- ips_metadata ips_rate-based
- ips_rate-based license_fortianalyzer-status
- license_fortianalyzer-status license_forticare-org-list
- license_forticare-org-list license_forticare-resellers
- license_forticare-resellers - Get current FortiCare resellers for the requested country.
- country_code - FortiGuard country code type: int required: False
license_status
- license_status log_av-archive_download
- log_av-archive_download - Download file quarantined by AntiVirus.
- mkey - Checksum for quarantined file. type: string required: True
log_current-disk-usage
- log_current-disk-usage log_device_state
- log_device_state log_event
- log_event log_fortianalyzer
- log_fortianalyzer - Return FortiAnalyzer/FortiManager log status.
- scope - Scope from which to test the connectivity of the FortiAnalyzer address [vdom|global]. type: string required: False
- server - FortiAnalyzer/FortiManager address. type: string required: False
- srcip - The IP to use to make the request to the FortiAnalyzer [
|auto]. When set to "auto" it will use the FortiGate's routing table to determine the IP to make the request from. type: string required: False
log_fortianalyzer-queue
- log_fortianalyzer-queue - Retrieve information on FortiAnalyzer's queue state. Note:- FortiAnalyzer logs are queued only if upload-option is realtime.
- scope - Scope from which to retrieve FortiAnalyzer's queue state [vdom*|global]. type: string required: False
log_forticloud
- log_forticloud log_forticloud-report-list
- log_forticloud-report-list log_forticloud-report_download
- log_forticloud-report_download - Download PDF report from FortiCloud.
- mkey - FortiCloud Report ID. type: int required: True
- report_name - Full filename of the report. type: string required: True
- inline - Set to 1 to download the report inline. type: int required: False
log_forticloud_connection
- log_forticloud_connection log_historic-daily-remote-logs
- log_historic-daily-remote-logs - Returns the amount of logs in bytes sent daily to a remote logging service (FortiCloud or FortiAnalyzer).
- server - Service name [forticloud | fortianalyzer]. type: string required: True
log_hourly-disk-usage
- log_hourly-disk-usage log_ips-archive_download
- log_ips-archive_download - Download IPS/application control packet capture files. Uses configured log display device.
- mkey - IPS archive ID. type: int required: True
- pcap_no - Packet capture roll number (required when log device is 'disk') type: int required: False
- pcap_category - Packet capture category (required when log device is 'disk') type: int required: False
log_local-report-list
- log_local-report-list log_local-report_download
- log_local-report_download - Download local report
- mkey - Local Report Name. type: string required: True
log_policy-archive_download
- log_policy-archive_download - Download policy-based packet capture archive.
- mkey - Session ID (from traffic log). type: int required: True
- srcip - Source IP. type: string required: True
- dstip - Destination IP. type: string required: True
log_stats
- log_stats - Return number of logs sent by category per day for a specific log device.
- dev - Log device [*memory | disk | fortianalyzer | forticloud]. type: string required: False
network_arp
- network_arp network_ddns_lookup
- network_ddns_lookup - Check DDNS FQDN availability.
- domain - Filter: domain to check. type: string required: True
network_ddns_servers
- network_ddns_servers network_dns_latency
- network_dns_latency network_fortiguard_live-services-latency
- network_fortiguard_live-services-latency network_lldp_neighbors
- network_lldp_neighbors network_lldp_ports
- network_lldp_ports - List all active LLDP ports.
- mkey - Filter: specific port name. type: string required: False
network_reverse-ip-lookup
- network_reverse-ip-lookup - Retrieve the resolved DNS domain name for a given IP address.
- ip - IP address (in dot-decimal notation). type: string required: True
nsx_instance
- nsx_instance - List NSX instances and their resource statistics.
- mkey - Filter: NSX SDN name. type: string required: False
nsx_service_status
- nsx_service_status - Retrieve NSX service status.
- mkey - Filter: NSX SDN name. type: string required: False
registration_forticloud_device-status
- registration_forticloud_device-status - Fetch device registration status from FortiCloud. Currently FortiSwitch and FortiAP are supported.
- serials - Serials of FortiSwitch and FortiAP to fetch registration status. type: array required: True
- update_cache - Clear cache and retrieve updated data. type: boolean required: False
registration_forticloud_disclaimer
- registration_forticloud_disclaimer registration_forticloud_domains
- registration_forticloud_domains router_bgp_neighbors
- router_bgp_neighbors router_bgp_neighbors6
- router_bgp_neighbors6 router_bgp_paths
- router_bgp_paths - List all discovered BGP paths.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return (Default behavior will return all BGP Paths). type: int required: False
router_bgp_paths-statistics
- router_bgp_paths-statistics - Retrieve BGP paths statistics, including number of IPv4 or IPv6 BGP paths.
- ip_version - IP version [*ipv4 | ipv6 | ipboth]. type: string required: False
router_bgp_paths6
- router_bgp_paths6 - List all discovered IPv6 BGP paths.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return (Default behavior will return all BGP Paths). type: int required: False
router_ipv4
- router_ipv4 - List all active IPv4 routing table entries.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return (Default for all routes). type: int required: False
- ip_mask - Filter: IP/netmask. type: string required: False
- gateway - Filter: gateway. type: string required: False
- type - Filter: route type. type: string required: False
- interface - Filter: interface name. type: string required: False
router_ipv6
- router_ipv6 - List all active IPv6 routing table entries.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return (Default for all routes). type: int required: False
- ip_mask - Filter: IP/netmask. type: string required: False
- gateway - Filter: gateway. type: string required: False
- type - Filter: route type. type: string required: False
- interface - Filter: interface name. type: string required: False
router_lookup
- router_lookup - Performs a route lookup by querying the routing table.
- ipv6 - Perform an IPv6 lookup. type: boolean required: False
- destination - Destination IP/FQDN. type: string required: True
router_lookup-policy
- router_lookup-policy - Performs a route lookup by querying the policy routing table.
- ipv6 - Perform an IPv6 lookup. type: boolean required: False
- destination - Destination IP/FQDN. type: string required: True
- source - Source IP/FQDN. type: string required: False
- destination_port - Destination Port. type: int required: False
- interface_name - Incoming Interface. type: string required: False
- protocol_number - IP Protocol Number. type: int required: False
router_ospf_neighbors
- router_ospf_neighbors router_policy
- router_policy - Retrieve a list of active IPv4 policy routes.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: False
- count_only - Returns the number of IPv4 policy routes only. type: boolean required: False
router_policy6
- router_policy6 - Retrieve a list of active IPv6 policy routes.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: False
- count_only - Returns the number of IPv6 policy routes only. type: boolean required: False
router_statistics
- router_statistics - Retrieve routing table statistics, including number of matched routes.
- ip_version - IP version (4|6). If not present, IPv4 and IPv6 will be returned. type: int required: False
- ip_mask - Filter: IP/netmask. type: string required: False
- gateway - Filter: gateway. type: string required: False
- type - Filter: route type. type: string required: False
- interface - Filter: interface name. type: string required: False
switch-controller_detected-device
- switch-controller_detected-device switch-controller_fsw-firmware
- switch-controller_fsw-firmware - Retrieve a list of recommended firmware for managed FortiSwitches.
- mkey - Filter: FortiSwitch ID. type: string required: False
- timeout - FortiGuard connection timeout (defaults to 3 seconds). type: int required: False
- version - Target firmware version of the parent FortiGate. type: object required: False
switch-controller_managed-switch
- switch-controller_managed-switch - Retrieve statistics for configured FortiSwitches. Deprecated. It will be removed in 7.2. It's replaced by /api/v2/monitor/switch-controller/managed-switch/status for faster performance.
- mkey - Filter: FortiSwitch ID. type: string required: False
- poe - Filter: Retrieve PoE statistics for ports of configured FortiSwitches. Port power usage is in Watt units. type: boolean required: False
- port_stats - Filter: Retrieve tx/rx statistics for ports of configured FortiSwitches. type: boolean required: False
- qos_stats - Filter: Retrieve QoS statistics for ports of configured FortiSwitches. type: boolean required: False
- stp_status - Filter: Retrieve STP status for ports of configured FortiSwitches. type: boolean required: False
- igmp_snooping_group - Filter: Retrieve IGMP Snooping group for configured FortiSwitches. type: boolean required: False
- transceiver - Filter: Retrieve transceiver information for ports of configured FortiSwitches. type: boolean required: False
switch-controller_managed-switch_cable-status
- switch-controller_managed-switch_cable-status - Diagnose cable information for a port. Virtual FortiSwitches and FortiLink ports are not supported.
- mkey - Filter: FortiSwitch ID. type: string required: True
- port - Name of managed FortiSwitch port. type: string required: True
switch-controller_managed-switch_dhcp-snooping
- switch-controller_managed-switch_dhcp-snooping switch-controller_managed-switch_faceplate-xml
- switch-controller_managed-switch_faceplate-xml - Retrieve XML for rendering FortiSwitch faceplate widget.
- mkey - Name of managed FortiSwitch. type: string required: True
switch-controller_managed-switch_health
- switch-controller_managed-switch_health - Retrieve health-check statistics for managed FortiSwitches.
- mkey - Filter: FortiSwitch ID. type: string required: False
switch-controller_managed-switch_models
- switch-controller_managed-switch_models switch-controller_managed-switch_port-health
- switch-controller_managed-switch_port-health - Retrieve port health statistics for managed FortiSwitches.
- mkey - Filter: FortiSwitch ID. type: string required: False
switch-controller_managed-switch_port-stats
- switch-controller_managed-switch_port-stats - Retrieve port statistics for configured FortiSwitches.
- mkey - Filter: FortiSwitch ID. type: string required: False
switch-controller_managed-switch_status
- switch-controller_managed-switch_status - Retrieve statistics for configured FortiSwitches.
- mkey - Filter: FortiSwitch ID. type: string required: False
switch-controller_managed-switch_transceivers
- switch-controller_managed-switch_transceivers switch-controller_managed-switch_tx-rx
- switch-controller_managed-switch_tx-rx - Retrieve the transceiver Tx and Rx power for a specific port.
- mkey - Filter: FortiSwitch ID. type: string required: True
- port - Name of the port. type: string required: True
switch-controller_matched-devices
- switch-controller_matched-devices - Return a list of devices that match NAC and/or dynamic port policies.
- mkey - FortiSwitch ID. Will return all devices if no ID is provided. type: string required: False
- include_dynamic - If true, include devices that match dynamic port policies. Default value is false. type: boolean required: False
switch-controller_mclag-icl_eligible-peer
- switch-controller_mclag-icl_eligible-peer - Find a pair of FortiSwitches that are eligible to form a tier-1 MC-LAG.
- fortilink - FortiLink interface name. type: string required: True
switch-controller_validate-switch-prefix
- switch-controller_validate-switch-prefix - Validate a FortiSwitch serial number prefix. Deprecated in 7.2 replaced by /api/v2/monitor/switch-controller/managed-switch/models.
- prefix - Prefix of FortiSwitch serial number. type: string required: False
system_3g-modem
- system_3g-modem system_acme-certificate-status
- system_acme-certificate-status - Get ACME certificate status.
- mkey - Check if specific certificate is available. type: string required: True
- scope - Scope of certificate [vdom*|global]. type: string required: False
system_acquired-dns
- system_acquired-dns system_automation-action_stats
- system_automation-action_stats - Statistics for automation actions.
- mkey - Filter: Automation action name. type: string required: False
system_automation-stitch_stats
- system_automation-stitch_stats - Statistics for automation stitches.
- mkey - Filter: Automation stitch name. type: string required: False
system_available-certificates
- system_available-certificates - Get available certificates.
- scope - Scope of certificate [vdom*|global]. type: string required: False
- with_remote - Include remote certificates. type: boolean required: False
- with_ca - Include certificate authorities. type: boolean required: False
- with_crl - Include certificate revocation lists. type: boolean required: False
- mkey - Check if specific certificate is available. type: string required: False
- find_all_references - Include reference counts across all VDOMs when scope is global. type: boolean required: False
system_available-interfaces
- system_available-interfaces - Retrieve a list of all interfaces along with some meta information regarding their availability.
- view_type - Optionally include additional information for interfaces. This parameter can be repeated multiple times. 'ha': Includes extra meta information useful when dealing with interfaces related to HA configuration. Interfaces that are used by an HA cluster as management interfaces are also included in this view. 'zone': Includes extra meta information for determining zone membership eligibility. 'vwp': Includes extra meta information for determining virtual wire pair eligibility. 'sdwan': Includes extra meta information for determining SD-WAN eligibility. 'switch': Includes extra meta information for determining switch eligibility. 'hard-switch': Includes extra meta information for determining hard-switch eligibility. 'limited': Includes limited information on parent interfaces that are in another VDOM. 'stat': Includes TX/RX statistics data. type: string required: False
- scope - Scope of interface list [vdom|global] type: string required: False
system_botnet
- system_botnet - List all known IP-based botnet entries in FortiGuard botnet database.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: False
- include_hit_only - Include entries with hits only. type: boolean required: False
system_botnet-domains
- system_botnet-domains - List all known domain-based botnet entries in FortiGuard botnet database.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: False
system_botnet-domains_hits
- system_botnet-domains_hits system_botnet-domains_stat
- system_botnet-domains_stat system_botnet_stat
- system_botnet_stat system_certificate_download
- system_certificate_download - Download certificate.
- mkey - Name of certificate. type: string required: True
- type - Type of certificate [local-cer|remote-cer|local-ca|remote-ca|local-csr|crl]. type: string required: True
- scope - Scope of certificate [vdom*|global]. type: string required: False
system_check-port-availability
- system_check-port-availability - Check whether a list of TCP port ranges is available for a certain service.
- port_ranges - List of TCP port range objects to check against. type: array required: True
- service - The service in which the ports could be available. 'service' options are [reserved | sysglobal | webproxy | ftpproxy | sslvpn | slaprobe | fsso | ftm_push]. If 'service' is not specified, the port ranges availability is checked against all services. type: string required: False
system_com-log_download
- system_com-log_download system_com-log_update
- system_com-log_update system_config-error-log_download
- system_config-error-log_download system_config-revision
- system_config-revision system_config-revision_file
- system_config-revision_file - Download a specific configuration revision.
- config_id - Configuration id. type: int required: False
system_config-revision_info
- system_config-revision_info - Retrieve meta information for a specific configuration revision.
- config_id - Configuration id. type: int required: False
system_config-script
- system_config-script system_config-sync_status
- system_config-sync_status system_config_backup
- system_config_backup - Backup system config
- destination - Configuration file destination [file*] type: string required: False
- password - Password to encrypt configuration data. type: string required: False
- scope - Specify global or VDOM only backup [global | vdom]. type: string required: True
- vdom - If 'vdom' scope specified, the name of the VDOM to backup configuration. type: string required: False
- password_mask - True to replace all the secrects and passwords with a mask. type: boolean required: False
- file_format - Configuration file format [fos* | yaml]. type: string required: False
system_config_restore-status
- system_config_restore-status - Check the status of the restoring system configuration session.
- session_id - Session ID for restoring configuration. type: string required: True
system_config_usb-filelist
- system_config_usb-filelist system_crash-log_download
- system_crash-log_download system_csf
- system_csf - Retrieve a full tree of downstream FortiGates registered to the Security Fabric.
- scope - Scope from which to retrieve the Security Fabric tree [vdom*|global]. type: string required: False
- all_vdoms - Include information from all VDOMs that the admin can access. Only applies for scope=vdom type: boolean required: False
system_csf_pending-authorizations
- system_csf_pending-authorizations system_current-admins
- system_current-admins system_debug_download
- system_debug_download system_dhcp
- system_dhcp - List all DHCP and DHCPv6 leases.
- scope - Scope from which to retrieve DHCP leases [vdom*|global]. Global scope is only accessible for global administrators. type: string required: False
- ipv6 - Include IPv6 addresses in the response. type: boolean required: False
- interface - Filter: Retrieve DHCP leases for this interface only. type: string required: False
system_external-resource_entry-list
- system_external-resource_entry-list - Retrieve resource file status with a list of valid/invalid entries for the specific external resource. Empty lines and comment lines are not returned.
- mkey - The external resource name to query. type: string required: True
- status_only - Set to true to retrieve resource file status only. (Skip valid/invalid entries.) type: boolean required: False
- include_notes - Set to true to retrieve notes on the resource file. type: boolean required: False
system_firmware
- system_firmware system_firmware_upgrade-paths
- system_firmware_upgrade-paths system_fortiguard-blacklist
- system_fortiguard-blacklist - Retrieve blacklist information for a specified IP.
- ip - IPv4 address to check against. type: string required: True
- timeout - Timeout period in seconds (defaults to 5). type: int required: False
system_fortiguard_server-info
- system_fortiguard_server-info system_fortimanager_backup-details
- system_fortimanager_backup-details - Get the properties of a FortiManager object.
- mkey - Object name. type: string required: True
- datasource - Object datasource. type: string required: True
system_fortimanager_backup-summary
- system_fortimanager_backup-summary system_fortimanager_status
- system_fortimanager_status system_global-resources
- system_global-resources system_global-search
- system_global-search - Search for CMDB table objects based on search phrase.
- search - Phrase used for searching. type: string required: True
- scope - Search scope [vdom|global]. type: string required: False
- search_tables - Array of CMDB tables to search on. If not defined, global search function will do a search on all tables that the current user has read permission on. E.g ['firewall.address', 'firewall.address6']. type: array required: False
- skip_tables - Array of CMDB tables to be skipped when doing global search. E.g. ['firewall.address', 'firewall.address6']. type: array required: False
system_ha-checksums
- system_ha-checksums system_ha-history
- system_ha-history system_ha-hw-interface
- system_ha-hw-interface system_ha-nonsync-checksums
- system_ha-nonsync-checksums system_ha-peer
- system_ha-peer - Get configuration of peer(s) in HA cluster. Uptime is expressed in seconds.
- serial_no - Serial number of the HA member. If not specified, fetch information for all HA members type: string required: False
- vcluster_id - Virtual cluster number. If not specified, fetch information for all active vclusters type: int required: False
system_ha-statistics
- system_ha-statistics system_ha-table-checksums
- system_ha-table-checksums - List of table checksums for members of HA cluster.
- serial_no - Serial number of the HA member. type: string required: True
- vdom_name - VDOM name of the HA member. If not specified, fetch table checksums for global. type: string required: False
system_interface
- system_interface - Retrieve statistics for all system interfaces.
- interface_name - Filter: interface name. type: string required: False
- include_vlan - Enable to include VLANs in result list. type: boolean required: False
- include_aggregate - Enable to include Aggregate interfaces in result list. type: boolean required: False
- scope - Scope from which to retrieve the interface stats from [vdom|global]. type: string required: False
system_interface-connected-admins-info
- system_interface-connected-admins-info - Return admins info that are connected to current interface.
- interface - Interface that admins is connected through. type: string required: True
system_interface_dhcp-status
- system_interface_dhcp-status - Retrieve the DHCP client status of an interface.
- mkey - Name of the interface. type: string required: True
- ipv6 - Retrieve the DHCPv6 client status. type: boolean required: False
system_interface_kernel-interfaces
- system_interface_kernel-interfaces system_interface_poe
- system_interface_poe - Retrieve PoE statistics for system interfaces.
- mkey - Filter: Name of the interface to fetch PoE statistics for. type: string required: False
- scope - Scope from which to retrieve the interface stats from [vdom|global] (default=vdom). type: string required: False
system_interface_speed-test-status
- system_interface_speed-test-status - Retrieve the current status of a speed-test with the results if finished.
- id - ID of the speed test. type: int required: True
system_interface_transceivers
- system_interface_transceivers - Get a list of transceivers being used by the FortiGate.
- scope - Scope from which to retrieve the transceiver information from [vdom|global]. type: string required: False
system_ipam_list
- system_ipam_list system_ipam_status
- system_ipam_status system_ipam_utilization
- system_ipam_utilization system_ipconf
- system_ipconf - Determine if there is an IP conflict for a specific IP using ARP.
- devs - List of interfaces to check for conflict. type: array required: True
- ipaddr - IPv4 address to check for conflict. type: string required: True
system_link-monitor
- system_link-monitor - Retrieve per-interface statistics for active link monitors.
- mkey - Name of link monitor. type: string required: False
system_lte-modem_status
- system_lte-modem_status system_modem
- system_modem system_nat46-ippools
- system_nat46-ippools system_ntp_status
- system_ntp_status system_object-tagging_usage
- system_object-tagging_usage system_object_usage
- system_object_usage - Retrieve all objects that are currently using as well as objects that can use the given object.
- q_path - The CMDB table's path type: string required: False
- q_name - The CMDB table's name type: string required: False
- qtypes - List of CMDB table qTypes type: array required: False
- scope - Scope of resource [vdom|global]. type: string required: False
- mkey - The mkey for the object type: string required: False
- child_path - The child path for the object type: string required: False
system_performance_status
- system_performance_status system_resolve-fqdn
- system_resolve-fqdn - Resolves the provided FQDNs to FQDN -> IP mappings.
- ipv6 - Resolve for the AAAA record? type: boolean required: False
- fqdn - List of FQDNs to be resolved type: array required: False
system_resource_usage
- system_resource_usage - Retreive current and historical usage data for a provided resource.
- scope - Scope of resource [vdom|global]. This parameter is only applicable if the FGT is in VDOM mode. type: string required: False
- resource - Resource to get usage data for [cpu|mem|disk|session|session6|setuprate|setuprate6|disk_lograte|faz_lograte|forticloud_lograte|gtp_tunnel|gtp_tunnel_setup_rate]. Defaults to all resources if not provided. Additionally, [npu_session|npu_session6] data is available for devices that have an NPU and [nturbo_session|nturbo_session6] data is available for NP6 devices that support NTurbo. [gtp_tunnel|gtp_tunnel_setup_rate] data is available for carrier platforms only. type: string required: False
- interval - Time interval of resource usage [1-min|10-min|30-min|1-hour|12-hour|24-hour]. Defaults to all intervals if not provided. type: string required: False
system_running-processes
- system_running-processes system_sandbox_cloud-regions
- system_sandbox_cloud-regions system_sandbox_connection
- system_sandbox_connection - Test the connection to FortiSandbox.
- server - IP/FQDN of the FortiSandbox to test. Uses the configured FortiSandbox IP/FQDN if no server is provided. type: string required: False
system_sandbox_stats
- system_sandbox_stats system_sandbox_status
- system_sandbox_status system_sandbox_test-connect
- system_sandbox_test-connect - Test the connectivity of a given FortiSandbox IP.
- server - IP/FQDN of the FortiSandbox to test. type: string required: True
system_sdn-connector_nsx-security-tags
- system_sdn-connector_nsx-security-tags - Retrieve a list of NSX security tags for connected NSX servers.
- mkey - Filter: NSX SDN connector name. type: string required: False
system_sdn-connector_status
- system_sdn-connector_status - Retrieve connection status for SDN connectors.
- mkey - Filter: SDN connector name. type: string required: False
- type - Filter: SDN connector type. Ignored if mkey is specified. type: string required: False
system_security-rating
- system_security-rating - Retrieve a Security Rating report result. Without ID specified, returns the most recent result.
- id - Report ID. type: int required: False
- report_type - Report type to view, Security Report when unspecified. type: string required: False
- scope - Scope of the report [vdom*|global]. Global scope is only accessible for global administrators. type: string required: False
system_security-rating_history
- system_security-rating_history - Retrieve Security Rating history.
- report_type - Security Rating report history to view, view Security Report when unspecified. type: string required: False
system_security-rating_lang
- system_security-rating_lang - Returns the requested Security Rating language mapping.
- key - Requested language mapping (en, fr, big5, euc-kr, GB2312, pg, sp, x-sjis). type: string required: False
system_security-rating_status
- system_security-rating_status - Check if a Security Rating report is currently running.
- id - Report ID. type: int required: False
- report_type - Report type to view, Security Report when unspecified. type: string required: False
- progress - Query report progress. type: boolean required: False
system_security-rating_supported-reports
- system_security-rating_supported-reports system_sensor-info
- system_sensor-info system_sniffer
- system_sniffer system_sniffer_download
- system_sniffer_download - Download a stored packet capture.
- mkey - ID of packet capture entry. type: int required: True
system_status
- system_status system_storage
- system_storage system_time
- system_time system_timezone
- system_timezone system_traffic-history_interface
- system_traffic-history_interface - Retrieve history traffic stats for an interface.
- interface - Interface name. type: string required: True
- time_period - Time period to retrieve data for [hour | day | week]. type: string required: True
system_traffic-history_top-applications
- system_traffic-history_top-applications - Retrieve top FortiView applications traffic stats by bandwidth.
- time_period - Time period to retrieve data for [hour | day | week]. type: string required: True
system_trusted-cert-authorities
- system_trusted-cert-authorities - Get trusted certifiate authorities.
- scope - Scope of certificate [vdom*|global]. type: string required: False
system_usb-log
- system_usb-log system_vdom-link
- system_vdom-link - Gets a list of all NPU VDOM Links and VDOM Links.
- scope - Scope from which to retrieve the VDOM link informaton from [vdom|global]. type: string required: False
system_vdom-resource
- system_vdom-resource system_vm-information
- system_vm-information user_banned
- user_banned user_banned_check
- user_banned_check - Check if an IPv4 or IPv6 address is banned administratively.
- ip_address - IPv4 or IPv6 Address to check. type: string required: True
user_collected-email
- user_collected-email - List email addresses collected from captive portal.
- ipv6 - Include collected email from IPv6 users. type: boolean required: False
user_detected-device
- user_detected-device - Retrieve a list of detected devices.
- expand_child_macs - Include child devices as separate entries in the list. type: boolean required: False
- with_dhcp - Retrieve DHCP lease information. type: boolean required: False
- with_endpoint - Retrieve FortiClient endpoint information. type: boolean required: False
- with_fortilink - Retrieve FortiLink information. type: boolean required: False
- with_fortiap - Retrieve FortiAP information. type: boolean required: False
- with_user - Retrieve authenticated user information. type: boolean required: False
user_device
- user_device - Retrieve a list of detected devices.
- master_only - List of master device only. type: boolean required: False
- master_mac - Filter: Master MAC of a device. Multiple entries could be returned. type: string required: False
user_device-category
- user_device-category user_device-type
- user_device-type user_device_query
- user_device_query - Retrieve user devices from user device store. List all the user devices if there is no filter set.
- start - Number of entries to skip from the beginning. type: int required: False
- number - Maximum number of entries to return. type: int required: False
- timestamp_from - To get entries since the timestamp for unified historical query. type: int required: False
- timestamp_to - To get entries before the timestamp for unified historical query. type: int required: False
- filters - A list of filters. Type: {"type": string, "value": string, "op": string}. Op: filter operator [exact|contains|greaterThanEqualTo|lessThanEqualTo]. Default is exact. type: array required: False
- query_type - Query type [latest|unified_latest|unified_history]. Default is latest. type: string required: False
- query_id - Provide a query ID to continue getting data for that unified request. Only available for unified query types. type: int required: False
- cache_query - Cache query result for 5 mins and return query ID. Only available for unified query types. Default is false. type: boolean required: False
- key_only - Return primary key fields only. Default is false. type: boolean required: False
- filter_logic - The logic between filters [and|or]). Default is and. type: string required: False
user_firewall
- user_firewall - List authenticated firewall users.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: False
- ipv4 - Include IPv4 users (default=true). type: boolean required: False
- ipv6 - Include IPv6 users (default=false). type: boolean required: False
- include_wad - Include explicit proxy users (default=true). type: boolean required: False
- include_fsso - Include FSSO users (default=true). type: boolean required: False
user_firewall_count
- user_firewall_count - Get the number of authenticated firewall users.
- ipv4 - Include IPv4 users (default=true). type: boolean required: False
- ipv6 - Include IPv6 users (default=false). type: boolean required: False
- include_wad - Include explicit proxy users (default=true). type: boolean required: False
- include_fsso - Include FSSO users (default=true). type: boolean required: False
user_fortitoken
- user_fortitoken user_fortitoken-cloud_status
- user_fortitoken-cloud_status user_fsso
- user_fsso - Get a list of fsso and fsso polling status.
- mkey - Filter: Get the status for a specific FSSO entry. `type` is required if this is set. type: string required: False
- type - Filter: Get the status for this type of FSSO entry [fsso|fsso-polling]. type: string required: False
user_info_query
- user_info_query - Query user info.
- start - Number of entries to skip from the beginning. type: int required: False
- number - Maximum number of entries to return. type: int required: False
- timestamp_from - To get entries since the timestamp for unified historical query. type: int required: False
- timestamp_to - To get entries before the timestamp for unified historical query. type: int required: False
- filters - A list of filters. Type: {"type": string, "value": string, "op": string}. Op: filter operator [exact|contains|greaterThanEqualTo|lessThanEqualTo]. Default is exact. type: array required: False
- query_type - Query type [latest|unified_latest|unified_history]. Default is latest. type: string required: False
- query_id - Provide a query ID to continue getting data for that unified request. Only available for unified query types. type: int required: False
- cache_query - Cache query result for 5 mins and return query ID. Only available for unified query types. Default is false. type: boolean required: False
- key_only - Return primary key fields only. Default is false. type: boolean required: False
- filter_logic - The logic between filters [and|or]). Default is and. type: string required: False
user_info_thumbnail
- user_info_thumbnail - Get user info thumbnail. Returns the first match to the filter.
- filters - A list of filters. Type: {"type": string, "value": string} type: array required: True
user_info_thumbnail-file
- user_info_thumbnail-file - Get user info thumbnail by given file name.
- filename - Thumbnail file name. The file name is from thumbnailPhoto field of user info query. type: string required: True
utm_antivirus_stats
- utm_antivirus_stats utm_app-lookup
- utm_app-lookup - Query remote FortiFlow database to resolve hosts to application control entries.
- hosts - List of hosts to resolve. type: array required: False
utm_application-categories
- utm_application-categories utm_blacklisted-certificates
- utm_blacklisted-certificates - Retrieve a list of blacklisted SSL certificates.
- start - Starting entry index. type: int required: True
- count - Maximum number of entries to return. Limit is set to 2000. type: int required: True
utm_blacklisted-certificates_statistics
- utm_blacklisted-certificates_statistics utm_rating-lookup
- utm_rating-lookup - Lookup FortiGuard rating for a specific URL.
- url - List of URLs to query. type: array required: False
videofilter_fortiguard-categories
- videofilter_fortiguard-categories virtual-wan_health-check
- virtual-wan_health-check virtual-wan_interface-log
- virtual-wan_interface-log - Retrieve log of SD-WAN interface quality information.
- interface - Filter: Interface name. type: string required: False
- since - Filter: Only return SLA logs generated since this Unix timestamp. type: int required: False
- seconds - Filter: Only return SLA logs generated in the last N seconds. type: int required: False
virtual-wan_members
- virtual-wan_members virtual-wan_sla-log
- virtual-wan_sla-log - Retrieve log of SLA probe results for for each SD-WAN SLA rule.
- sla - Filter: SLA name. type: string required: False
- interface - Filter: Interface name. type: string required: False
- since - Filter: Only return SLA logs generated since this Unix timestamp. type: int required: False
- seconds - Filter: Only return SLA logs generated in the last N seconds. type: int required: False
- sampling_interval - The interval to be used for sampling SLA logs, in seconds (default=5). type: int required: False
vpn-certificate_cert-name-available
- vpn-certificate_cert-name-available - Check if the local certificate name is available to use.
- mkey - The certificate name to be checked. type: string required: True
- scope - Scope of certificate name [vdom*|global]. Global scope is only accessible for global administrators type: string required: False
vpn_ipsec
- vpn_ipsec - Return an array of active IPsec VPNs.
- tunnel - Filter for a specific IPsec tunnel name. type: string required: False
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: False
vpn_ocvpn_members
- vpn_ocvpn_members vpn_ocvpn_meta
- vpn_ocvpn_meta vpn_ocvpn_status
- vpn_ocvpn_status vpn_one-click_members
- vpn_one-click_members vpn_one-click_status
- vpn_one-click_status vpn_ssl
- vpn_ssl vpn_ssl_stats
- vpn_ssl_stats wanopt_history
- wanopt_history - Retrieve WAN opt. statistics history.
- period - Statistics period [10-min*|hour|day|week|30-day]. type: string required: False
wanopt_peer_stats
- wanopt_peer_stats wanopt_webcache
- wanopt_webcache - Retrieve webcache statistics history.
- period - Statistics period [10-min*|hour|day|week|30-day]. type: string required: False
web-ui_custom-language_download
- web-ui_custom-language_download - Download a custom language file.
- filename - Name of custom language entry. type: string required: True
webcache_stats
- webcache_stats - Retrieve webcache statistics.
- period - Statistics period [10min|hour|day|month]. type: string required: False
webfilter_category-quota
- webfilter_category-quota - Retrieve quota usage statistics for webfilter categories.
- profile - Webfilter profile. type: string required: False
- user - User or IP (required if profile specified). type: string required: False
webfilter_fortiguard-categories
- webfilter_fortiguard-categories - Return FortiGuard web filter categories.
- include_unrated - Include Unrated category in result list. type: boolean required: False
- convert_unrated_id - Convert Unrated category id to the one for CLI use. type: boolean required: False
webfilter_malicious-urls
- webfilter_malicious-urls webfilter_malicious-urls_stat
- webfilter_malicious-urls_stat webfilter_override
- webfilter_override webfilter_trusted-urls
- webfilter_trusted-urls webproxy_pacfile_download
- webproxy_pacfile_download wifi_ap-names
- wifi_ap-names wifi_ap_channels
- wifi_ap_channels - Retrieve the set of channel lists for all possible band/configurations for the given FortiAP platform.
- country - Two-letter code for the country the AP is operating in. type: string required: False
- platform_type - Short name for platform type (e.g. '220A') type: string required: True
- indoor_outdoor - FortiAP indoor/outdoor configuration value (0 for indoor, 1 for outdoor, 2 for default). type: int required: False
wifi_ap_status
- wifi_ap_status wifi_client
- wifi_client - Retrieve a list of connected WiFi clients.
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: False
- type - Request type [all*|fail-login]. type: string required: False
- with_triangulation - Enable to include regions of FortiAP detecting the client. type: boolean required: False
wifi_euclid
- wifi_euclid wifi_firmware
- wifi_firmware - Retrieve a list of current and recommended firmware for FortiAPs in use.
- timeout - FortiGuard connection timeout (defaults to 2 seconds). type: int required: False
- version - Target firmware version of the parent FortiGate. type: object required: False
wifi_interfering_ap
- wifi_interfering_ap - Retrieve a list of interfering APs for one FortiAP radio.
- wtp - FortiAP ID to query. type: string required: False
- radio - Radio ID. type: int required: False
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: False
wifi_managed_ap
- wifi_managed_ap - Retrieve a list of managed FortiAPs.
- wtp_id - Filter: single managed FortiAP by ID. type: string required: False
- incl_local - Enable to include the local FortiWiFi device in the results. type: boolean required: False
wifi_matched-devices
- wifi_matched-devices wifi_meta
- wifi_meta wifi_network_list
- wifi_network_list wifi_network_status
- wifi_network_status wifi_region-image
- wifi_region-image - Retrieves a floorplan/region image from a configured FortiAP region.
- region_name - Region name to retrieve image from. type: string required: True
wifi_rogue_ap
- wifi_rogue_ap - Retrieve a list of detected rogue APs.
- managed_ssid_only - Filter: True to include only WiFi controller managed SSIDs. type: boolean required: False
- start - Starting entry index. type: int required: False
- count - Maximum number of entries to return. type: int required: False
wifi_spectrum
- wifi_spectrum - Retrieve spectrum analysis information for a specific FortiAP.
- wtp_id - FortiAP ID to query. type: string required: True
wifi_station-capability
- wifi_station-capability - Retrieve a list of stations and their capability to connect to detected access points.
- mac_address - Station MAC address. type: string required: False
wifi_unassociated-devices
- wifi_unassociated-devices - Retrieve a list of unassociated and BLE devices
- with_triangulation - Enable to include regions of FortiAP detecting the device. type: boolean required: False
wifi_vlan-probe
- wifi_vlan-probe - Retrieve the VLAN probe results.
- ap_interface - FortiAP interface to send the probe on. type: int required: True
- wtp - FortiAP ID. type: string required: True
- params - the parameter for each selector, see definition in above list.type: dict
Notes¶
Note
- Different
selector
may have different parameters, users are expected to look up them for a specific selector. - For some selectors, the objects are global, no
params
are allowed to appear. - Not all parameters are required for a slector.
- This module is exclusivly for FortiOS monitor API.
- The result of API request is stored in
results
. - There are three filtering parameters:
filters
,sorters
andformatters
, please see filtering spec for more information.
Examples¶
- hosts: fortigate03
connection: httpapi
collections:
- fortinet.fortios
vars:
vdom: "root"
ansible_httpapi_use_ssl: yes
ansible_httpapi_validate_certs: no
ansible_httpapi_port: 443
tasks:
- fortios_monitor_fact:
vdom: ""
enable_log: true
formatters:
- model_name
filters:
- model_name==FortiGat
selector: 'system_status'
- name: fact gathering
fortios_monitor_fact:
vdom: ""
access_token: ""
selector: 'firewall_acl'
- name: fact gathering
fortios_monitor_fact:
vdom: ""
access_token: ""
selector: 'firewall_security-policy'
params:
policyid: '1'
Return Values¶
Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module:
- build - Build number of the fortigate image returned: always type: str sample: 1547
- http_method - Last method used to provision the content into FortiGate returned: always type: str sample: GET
- name - Name of the table used to fulfill the request returned: always type: str sample: firmware
- path - Path of the table used to fulfill the request returned: always type: str sample: system
- results - Object list retrieved from device. returned: always type: list
- revision - Internal revision number returned: always type: str sample: 17.0.2.10658
- serial - Serial number of the unit returned: always type: str sample: FGVMEVYYQT3AB5352
- status - Indication of the operation's result returned: always type: str sample: success
- vdom - Virtual domain used returned: always type: str sample: root
- version - Version of the FortiGate returned: always type: str sample: v5.6.3
- ansible_facts - The list of fact subsets collected from the device returned: always type: dict