FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
pragyasharma
Staff
Staff
Article Id 416720
Description This article describes the steps required to migrate from a physical FortiAnalyzer-VM device to a virtual FortiAnalyzer AHV. It includes backup, configuration editing, VM deployment, and restoration steps.
Scope Applies to users who want to move from FortiAnalyzer-VM to a FortiAnalyzer AHV on Nutanix.
Solution

To migrate a FortiAnalyzer VM to Nutanix, follow these steps:

 

  1. Deploy a New VM on Nutanix: 

Use a compatible FortiAnalyzer image/template provided by Fortinet to deploy a new VM on Nutanix AHV. Ensure the new VM matches the FortiAnalyzer version running on the existing environment for compatibility.

 

  1. Backup Configuration and Logs: 

On the existing FortiAnalyzer VM, perform a full backup of the configuration and logs. Use the GUI or CLI to export the backup files.

Create a full backup of the FortiAnalyzer device using the following guides:

 

  1. Restore Configuration on Nutanix VM:

Import the configuration backup to the new FortiAnalyzer VM on Nutanix. Adjust any network settings as necessary to match the new environment.

 

Use 7-Zip or another archive tool to open the backup file and navigate to the following path: FAZ_Backup.dat\FAZ_Backup\var\fwclienttemp\system.conf.

 

  • Open system.conf.
  • Replace all instances of FAZ_VM64 with FAZ_AHV.
  • Save the file back into the archive.

 

For additional guidance, refer to Technical Tip: How to Migrate FortiAnalyzer Log and Config to Another Unit.

 

Tip: v7.4.3, 7.6.0 or above: 'Migrate from a different platform' option can be used without editing the backup file.

 

2025-10-27_12h06_22.png

 

  1. License Validation: 

Due to the change in UUID, it will be necessary to re-validate and activate the FortiAnalyzer license. Have a look at the KB article below to download the license file from the support portal.

Technical Tip: How to reuse FortiManager/FortiAnalyzer VM license

 

  1. Verify Functionality:

Ensure that all configurations are correctly applied and that the FortiAnalyzer is functioning as expected.

Check connectivity with connected devices and verify log collection. These steps will help ensure a smooth migration while preserving configurations and logs. 

 

Related document:

Deploying FortiAnalyzer on Nutanix