| Solution | VDOM deletion may fail on FortiAnalyzer from the CLI with the following error: fazs10 # exec log device vdom delete DEVICE_NAME ABC This command will delete Vdom:'ABC' and its log files from device 'DEVICE_NAME'. Do you want to continue? (y/n)y Internal error: 1. Command fail. Return code 1 This could be because the dvmdb may be corrupted. Run the following debug commands in the FortiAnalyzer CLI: diagnose debug enable diagnose debug service dvmdb 255 Then, execute the command that failed previously from a separate CLI window: execute log device vdom delete xxx xxx The following logs are observed: The VDOM is loaded successfully: Request [/bin/newcli:33396:8]: { "client": "\/bin\/newcli:33396", "id": 8, "method": "get", "params": [{ "target start": 1, "url": "dvmdb\/device\/fw-rect-tstips\/vdom "}]} Response [/bin/newcli:33396:8]: { "id": 8, "result": [{ "data": [{ "comments": "Vdom between Belnet and rtr-rect-inter", "devid": 185, "ext_flags": 0, "flags": 0, "name ": "IPS_Ext", "node_flags": 4, "oid": 104, "opmode": 2, "rtm_prof_id": 0, "status": null, "tab_status": null, "vdom_type": 1, "vpn_id": 0}, { "comments": null, "devid": 185, "ext_flags": 0, "flags": 0, "name": "IPS_Nat_Tst", "node_flags": 4, "oid": 106, "opmode": 1, "rtm_ prof_id": 0, "status": null, "tab_status": null, "vdom_type": 0, "vpn_id": 0}, { "comments": "", "devid": 185, "ext_flags": 0, "flags": 0, "name": "root", "node_flags": 0, "oid": 3, "opmode": 1, "rtm_prof_id": 0, "status": null, "tab_status": null, "vdom_type": 1, "vpn_id ": 0}], "status": { "code": 0, "message": "OK"}, "url": "dvmdb\/device\/fw-rect-tstips\/vdom"}]} - ABC However, attempt to delete it fails: Request [/bin/newcli:33396:9]: { "client": "\/bin\/newcli:33396", "id": 9, "method": "delete", "params": [{ "target start": 1, "url": "dvmdb\/device\/fw-rect-tstips\/v dom\/IPS_Ext"}]} Response [/bin/newcli:33396:9]: { "id": 9, "result": [{ "status": { "code": -20001, "message": "Internal error"}, "url": "dvmdb\/device\/fw-rect-tstips\/vdom\/IPS_Ext"} ]} Delete Vdom 'IPS_Ext' of Device 'DEVICE_NAME' failed. Internal error: 1. Command fail. Return code 1 To resolve the issue, follow these steps: Try running the following commands to check the integrity of the dvmdb and adom: diagnose pm2 check-integrity all diagnose dvm check-integrity diagnose cdb check adom-integrity If the above steps do not resolve the issue, try removing the device from FortiAnalyzer and then adding it back. Before adding it back, try to remove the VDOM from the FortiGate side. |