Visitor III

Solved

FortiAnalyzer Log Issue

Forum|Forum|11 days ago
June 2, 2026
2 replies
57 views

On FortiAnalyzer, the devices added under Device Manager show "Last Log Time: N/A". However, when checking the dashboard, logs appear to be arriving normally. At the same time, the Log Viewer cannot be opened, and the Reporting section is also inaccessible.

The currently used version is 7.4.2, and it seems that there are known issues related to this behavior in this release. Could you please confirm whether this is a known bug and advise on any available workaround or recommended upgrade path?

Best answer by Sheikh

Since you are moving from 7.x.x to 8.x.x, this will be a significant upgrade. I'm not sure how long it will take, but it would be best to complete this task during a scheduled maintenance window. If this is a virtual machine, take a VM snapshot and database backup beforehand.

The exact downtime depends on the hardware model/VM resources, database size, and log volume but typically ranges from 30–60 minutes and can be longer for large deployments.

During the upgrade:

- GUI access is unavailable.
- Log collection, Log View, reports, and analytics are unavailable.
- FortiGate devices may buffer logs locally and forward them after FortiAnalyzer is back online (subject to available disk space and device settings).
- No configuration changes or report generation can be performed.

Before upgrading, it is recommended:

- Taking a full backup of the configuration and logs.
- Reviewing the supported upgrade path in the FortiAnalyzer Upgrade Guide.
Performing the upgrade during a maintenance window.

regards,

Sheikh

Sheikh

Staff

hello @Dzhem35 ,

This behavior is consistent with known issues in FortiAnalyzer 7.4.2, where Log View may fail to load and reporting functions can be impacted even though logs are still being received.

https://docs.fortinet.com/document/fortianalyzer/7.4.2/release-notes/35134/known-issues

962540	Log View page does not load when log filters are applied.
989022	FortiAnalyzer doesn't display FortiClient analytics and raw logs in Log View when EMS FortiFlex license is being used.

Try updating to at least 7.4.3 GA, or even better, to a later firmware version (if possible). As a best practice, please thoroughly check the release notes.

regards,

Sheikh

If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.

D

Dzhem35Author

Visitor III

I looked at the release notes for version 8.0.0, and I think this will be a solution, but when I start the upgrade process, how long will the downtime on FortiAnalyzer last, and will it affect anything else?

SheikhAnswer

Staff

Since you are moving from 7.x.x to 8.x.x, this will be a significant upgrade. I'm not sure how long it will take, but it would be best to complete this task during a scheduled maintenance window. If this is a virtual machine, take a VM snapshot and database backup beforehand.

The exact downtime depends on the hardware model/VM resources, database size, and log volume but typically ranges from 30–60 minutes and can be longer for large deployments.

During the upgrade:

- GUI access is unavailable.
- Log collection, Log View, reports, and analytics are unavailable.
- FortiGate devices may buffer logs locally and forward them after FortiAnalyzer is back online (subject to available disk space and device settings).
- No configuration changes or report generation can be performed.

Before upgrading, it is recommended:

- Taking a full backup of the configuration and logs.
- Reviewing the supported upgrade path in the FortiAnalyzer Upgrade Guide.
Performing the upgrade during a maintenance window.

regards,

Sheikh

If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.

D

Dzhem35Author

Visitor III

After the firmware upgrade all sections came usable

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded