Troubleshooting Tip: Disk is showing as the only log location

Description

This article describes seeing only Disk as the only log location in logs such as System events or Security events when the firewall has no disk.

Scope

FortiGate.

Solution

To check if the firewall has a disk, run the command below:

get system status

Check the line for log hard disk. If it is shown as 'Not available', it means the firewall has no disk.

Refer to the example images below that show the disk as the only log location:

When this happens and memory or FortiGate Cloud logging is enabled, kill the httpsd process by running the command below:

fnsysctl killall httpsd

After running the command, refresh the webpage. The issue should be resolved and the correct options for log location should show.

Refer to the example image below:

Even though the System Events page dropdown does not render memory as an available option, this does not mean the options aren't configured properly.

A real logging config can be seen from CLI regardless of the GUI issue :

To view log settings :

show log setting

To view memory log settings :

show log memory setting

Related documents: 

Troubleshooting Tip: Logs are not displayed in FortiView