Troubleshooting Tip: FortiPAM to FortiAnalyzer Cloud

Description

This article describes how to troubleshoot when FortiPAM status is down in FortiAnalyzer Cloud.

Scope

FortiAnalyzer Cloud.

Solution

1. Ensure FortiPAM is registered under the same account as FortiAnalyzer Cloud.

2. Ensure FortiAnalyzer Cloud has an account-level license to receive logs from FortiPAM.

For example: FC1-10-AZCLD-463-01-12.

3. Performed basic network connectivity tests using ping and telnet tests:
   
   

#execute telnet fortianalyzer.forticloud.com 514

#execute ping <enter full FQDN>

Example:

#execute ping 1640814.ap-northeast-1.fortianalyzer.forticloud.com

4. Perform sniffer towards the FortiAnalyzer Cloud servers, where 'x.x.x.x' is the resolved IP in the procedure above:
   
   

#diagnose sniffer packet any 'host x.x.x.x and port 514' 4

5. If there is a need to report a support ticket, collect the following command outputs and share them in the ticket with the above outputs.

On FortiAnalyzer:

diagnose debug application oftpd
diagnose debug enable

On FortiPAM:

diagnose debug application miglogd -1
diagnose debug enable

6. A support ticket can be opened by accessing Support.