Troubleshooting Tip: Prevent 'wrong address' logs from being generated in FSSO Logs
| Description | This article describes how to prevent receiving 'record_dcagent_event:439, wrong address, monitorType:65536' logs in the FSSO agent regarding decommissioned DC. |
| Scope | FortiGate, FSSO. |
| Solution | Error message 'dcagent_event:439, wrong address' means that FSSO is trying to pull up event logs from a decommissioned Domain Controller which is no longer available:
[ 3552] record_dcagent_event:439, wrong address, monitorType:65536
Could not open the event log “on:asdc02.example.com”
In this case, 'on:asdc02.example.com' is a decommissioned domain controller and is not showing in the 'show monitor DC' setting of FSSO.
Solution: Delete the DC entry manually of the decommissioned server in the FSSO CA registry. |