FMG manage FAZ, no have log view on FMG

Hello kyle-hsuan, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Regards,

Regards,

Hello again kyle-hsuan,

I found this answer, can you tell us if it helps, please?

Issue Summary

You have configured FortiManager (FMG) to manage a FortiAnalyzer (FAZ), following the official guide. Both FMG and FAZ have an ADOM named adom_v74 with the same device inside. However, on FMG, the Log View and FortiView options are missing from the sidebar in the adom_v74 ADOM, so you cannot view logs or traffic analytics there. Only the "faz" ADOM on FMG shows these options.

Key Points from the Guide and Context

• FMG and FAZ must have the same ADOM name and type, and contain the same devices.
• Only one FAZ can be added to each FortiGate ADOM on FMG.
• FMG must be in Normal ADOM mode.
• FAZ features must be globally disabled on FMG before adding FAZ.
• FMG and FAZ must be running the same firmware version (v5.6 or later).
• FMG access must be enabled on the FAZ interface.
• After adding FAZ, the ADOM on FAZ is locked and managed by FMG.
• Log View and FortiView should appear in the FMG sidebar after successful integration.

Troubleshooting Steps

1. Confirm Feature Enablement

• Log View and FortiView will only appear in FMG after you have either enabled the FortiAnalyzer feature or added a FAZ device.
• If these features are not visible, it may indicate that the FAZ integration is incomplete or not properly synchronized for that ADOM.
   

2. Check ADOM Synchronization

• Both FMG and FAZ must have the same ADOM name, type, and device list.
• If there is any mismatch, synchronization will fail and log features will not be available in FMG for that ADOM.
   

3. Verify ADOM Type

• Both ADOMs must be of the same type (e.g., Fabric).
• Mismatched ADOM types can prevent log features from appearing.
   

4. Firmware Version Match

• FMG and FAZ must be running the same firmware version.
• Mismatched versions can cause feature or synchronization issues.
   

5. Administrative Access: Ensure that the FAZ interface used by FMG has FortiManager access enabled.
    

6. FMG ADOM Mode: FMG must be in Normal ADOM mode (not Fabric or Advanced).
    

7. FAZ Features on FMG: FAZ features must be globally disabled on FMG before adding FAZ as a managed device.

Why only ‘faz’ ADOM has log view:

• The "faz" ADOM on FMG is a special ADOM created for direct FAZ management and will always show log features.
• For other ADOMs (like adom_v74), log features will only appear if the FAZ is correctly integrated and synchronized for that ADOM.

Next Steps & Clarification Questions

1. Did you add the FAZ device to FMG using the "Add FortiAnalyzer" option, and assign it to the adom_v74 ADOM?
2. Are both FMG and FAZ running the exact same firmware version?
3. Is the device list in adom_v74 identical on both FMG and FAZ?
4. Is the ADOM type (e.g., Fabric) the same on both FMG and FAZ for adom_v74?
5. Is FMG in Normal ADOM mode?
6. Did you disable the built-in FAZ features on FMG before adding the external FAZ?
7. After adding FAZ, did you see any synchronization errors or warnings?

Follow-up actions

• Please review the above checklist and confirm each point.
• If all settings are correct and the issue persists, try removing and re-adding the FAZ to FMG, ensuring all prerequisites are met.
• If you see any error messages or synchronization issues, please provide screenshots or logs for further analysis.

Let me know your answers to the clarification questions above, or if you need step-by-step guidance for any of the checks!

​@kyle-hsuan 

Go to the the ADOM v7.4 on FMG then Add the FAZ in that ADOM using  Add Existing FortiAnalyzer option.

https://docs.fortinet.com/document/fortimanager/8.0.0/administration-guide/358875/adding-fortianalyzer-devices-using-the-wizard#Add_Existing_FAZ