Logs are not being written to disk
Purpose
Sometimes a FortiGate disk may need to be formatted before the disk can be used.
This is particularly important for HA clusters:
1) when forming an HA cluster, disk status must match
2) logging of event logs to disk is helpful to understand HA cluster transitions
Otherwise, care should be taken to use disk logging selectively and only when needed.
Consider using alternate log locations like FortiAnalyzer, FortiCloud and syslog.
Expectations, Requirements
FortiGate should be able to log to disk if it has one.
Configuration
Look for ...
Sometimes a FortiGate disk may need to be formatted before the disk can be used.
This is particularly important for HA clusters:
1) when forming an HA cluster, disk status must match
2) logging of event logs to disk is helpful to understand HA cluster transitions
Otherwise, care should be taken to use disk logging selectively and only when needed.
Consider using alternate log locations like FortiAnalyzer, FortiCloud and syslog.
Expectations, Requirements
FortiGate should be able to log to disk if it has one.
Configuration
1. At the CLI run:
get system status
Look for ...
Log hard disk: Need to Format
2. Format the disk
execute formatlogdisk
Note:
!! This operation will erase all quarantine files and logging data on the hard disk and will reboot the FortiGate