Troubleshooting Tip: Unable to see Health Check logs under Audit Log Module

Description

This article describes why the Audit Log Module did not have the Health Check logs entry.

Scope

FortiAppSec Cloud.

Solution

When an administrator onboards an application on FortiAppSec, FortiAppSec will assign more than 2 scrubbing center IP's for the cluster by default. This provides redundancy as well load balance the traffic.

When FortiAppSec generates a Health Check request to the Origin server from one of the cluster IPs, if it fails to get the response from Origin server, FortiAppSec will try to generate a similar Health Check request from a different IP on the same cluster.

The audit log will only show the log of Health Check when all of the FortiAppSec Scrubbing Centers (WAFs) fail the Health Check to the origin server.

If one of the Scrubbing Center IPs from that cluster does not fail the Health Check, it will not generate the health check failure log.