FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
This article describes how to delete unit from FortiAnalyzer even from FortiManager side logging unit list has been deleted.
Scope
When the FortiAnalyzer is managed by FortiManager, buttons (edit and delete) will appear grey and 'All devices should be performed from FortiManager to avoid conflict' message will appear.
Solution
Run the command from FortiAnalyzer CLI to unlock the DVM device.
diag dvm adom unlock <adom_name>
After running the command, log out of FortiAnalyzer, then log back in. The delete button will be available.
Delete the unit and log in again.
After logout, login, the pop message 'All devices should be performed from FortiManager to avoid conflict' should appear.
If not, refresh the FortiAnalyzer from the FortiManager side.
