Fortigate Interface/Tunnel Alerts


Im still new to this,

Im trying to get libre to alert on when a fortigate interface/IPSEC tunnel goes down,

So far Im able to get the foritgates tunnels are down, however it seems to report all that are down, rather than interfaces/tunnels that had gone down but were up, I was doing this based off the Eventlog?

Was using the above image? am I missing or something? or is there a better way to do this?