Technical Tip: Rebuild log database

Symptom:

1. Cannot display logs in Log&Report.
2. Inconsistent and delayed log display.

To rebuild the log database, use the following CLI command:

FortiADC-KVM # exe log rebuild-db

It is necessary to wait at least 2 minutes until the log rebuild completes

Note: Log database rebuild takes place on a per-VDOM basis. Make sure to run the CLI command in the right VDOM.

config vdom
    edit <vdom-name>

        execute log rebuild-db

It is recommended to rebuild the log database during off-production hours or during a maintenance window as logs might not be available during a rebuild.

Verification steps: 

Navigate to Log & Report -> Event Log.

If the issue persists even after rebuilding the database, the next step is to format the logdisk using the following.

FortiADC-KVM # execute formatlogdisk

This operation will erase all data on the log disk!
Do you want to continue? (y/n)y

Note: The command above will clear the logs from the hard disk and reformat the disk. Executing this command will trigger a reboot, so it is recommended to run this command during non-production or during the maintenance window.

Related articles:
Technical Tip: How to upgrade Log Database manually 
Technical Tip: Manually upgrade history statistics database