Skip to main content
ssanga
Staff & Editor
Staff & Editor
January 14, 2025

Troubleshooting Tip: 'Automatic Configuration Backup to Flash Disk Failed' after Making Configuration Changes via SSH

  • January 14, 2025
  • 0 replies
  • 839 views
Description This article describes an issue where a FortiGate logs the message 'Automatic configuration backup to flash disk failed' under System Events when a configuration change is performed via SSH.
Scope FortiGate v7.2.7, v7.2.8, v7.4.4
Solution

When revision-backup-on-logout or revision-image-auto-backup is enabled on FortiGate, the log message 'Automatic configuration backup to flash disk failed' is generated in the System Events after configuration changes are made on FortiGate via SSH.

 

However, this alert is not generated for configuration changes made through the GUI. This issue may occur if the SSH daemon (SSHd) is restarted or if an active SSH session is closed abruptly.

config system global
    set revision-backup-on-logout enable
    set revision-image-auto-backup enable
end

System Events:


time="08:23:02" id=7380348888072323097 bid=256408363 dvid=1134 itime=1718371382 logver=704042662 logid="0100032144" type="event" subtype="system" level="error" action="backup" msg="Automatic configuration backup to flash disk failed" logdesc="System configuration backed up error" user="admin" ui="ssh(192.168.1.1)" status="failure" eventtime=1718371382337689615 tz="-0500" devid="FGT60E*****" vd="root" devname="test_box"

Debugs when SSH session is closed abruptly:


14:26:21 cmdbsvr recv req_type=22(CMDB_REQ_SEND_CMDB_EVENT) from pid=20029(/bin/newcli)
14:26:21 SSH: Received disconnect from 192.168.1.1: 11: Session closed

Debugs when SSH session is not closed abruptly:


09:21:01 cmdbsvr recv req_type=22(CMDB_REQ_SEND_CMDB_EVENT) from pid=22185(/bin/newcli)
09:21:01 SSH: channel 0: rcvd eof
09:21:01 SSH: channel 0: output open -> drain
09:21:01 SSH: channel 0: obuf empty
09:21:01 SSH: channel 0: close_write
09:21:01 SSH: channel 0: output drain -> closed
09:21:01 SSH: Received disconnect from 192.168.1.1: 11: disconnected by user

This issue has been resolved in v7.6.1.

 

Logs required by FortiGate TAC for investigation.

 

  • Debugs:


diagnose debug enable
diagnose debug console timestamp enable
diagnose debug application sshd -1
diagnose debug cmdb-trace 2
diagnose debug application kmiglogd -1
diagnose debug cli 7
diagnose debug enable
<reproduce the issue>
diagnose debug reset
execute revision list config

  • TAC Report:


execute tac report

 

  • Configuration file of the FortiGate.
  • System Events