FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
Nur
Staff
Staff
Article Id 329497
Description This article describes how to fix the status of a disk that changed from OK to degraded.
Scope FortiAnalyzer/FortiManager Hardware.
Solution

When running a disk health check, it detected one of the disks that became degraded.

 

 ### RAID inf
Mega RAID:
RAID Level: Raid-50
RAID Status: Degraded
RAID Size: 27939GB
File System: ext4 27501GB
Groups: 2

Disk 0: OK 2793GB Group-1
Disk 1: OK 2793GB Group-1
Disk 2: OK 2793GB Group-1
Disk 3: OK 2793GB Group-1
Disk 4: Failed 2793GB
Disk 5: OK 2793GB Group-1
Disk 6: OK 2793GB Group-2

 

Steps to follow:

  1. Remove the affected hard disk.
  2. Re-add the affected hard disk to the slot.
  3. After re-adding the affected disk, check the disk status if it is 'unused' or 'degraded'.
  4. If the status changed to 'unused', run the CLI command

    execute raid delete-disk 4  
     <-- To remove the disk manually.
    execute raid add-disk 4      <-- To add the disk manually.

Warning: Ensure working on the right disk. GUI Disk Numbering Scheme may differ from CLI and Physical Numbering Scheme in some models.

 

As shown below in the GUI, logical disk 10 is unavailable, which corresponds to physical disk 11.

 

Disk1.png

 

 

In the same way, from CLI will be Disk 11.

 

Disk2.png

 

 

To avoid confusion, a fix is included in FortiAnalyzer versions 7.4.7, 7.6.4, and higher.

 

For additional information, ask the technical support representative for BUG: ID 1141634.

 

  5. The disk will show rebuild and will take less than 24 hours to complete.

  6. After the complete rebuild, check the disk health.

  7.  If the above does not help or the status has changed to 'degrade', contact Fortinet support and provide the TAC report ('exe tac report') for further troubleshooting and the potential disk swap.

 

This is possible for removable disks from hardware.

This action can be performed when the devices are On or Offline Mode.

It does not need to perform time windows while performing troubleshooting.
Hot-swappable disks are only available on FortiAnalyzer devices with Hardware RAID. 

Check the documentation to verify if the model disks are hot-swappable.

 

Related article:

Technical Tip: How to identify hardware or software RAID in FortiAnalyzer or FortiManager