26.03.2018

FastNetMon attack notification in Grafana

In this guide you can enable attack notification in FastNetMon.

It will look like:

Please open any dashboard where you need this information (we suggest using “FastNetMon Advanced Total traffic”). Then find button with gear sign on top of screen and press it.

Then select “annotations” on left panel and press “Add Annotation Query” button.

Query:

Field mappings:

And save all changes with “Save” button on left side.

Then, please install dependencies for our script:

And put following content into /usr/local/bin/publish_grafana_annotations_json.pl

And set executable bit for it:

You need to use following mode from FastNetMon to use this script properly:

Finally, please test integration using ban function for some test IP address (be careful, FastNetMon will block it!):