Technical Tip: How to restore a physical RAID storage with all logs on FortiAnalyzer

[FTNT_FortiJan]

Description	This article describes how to restore a physical RAID storage with all existing logs on a new FortiAnalyzer unit when the old FortiAnalyzer requires RMA. The same steps can be followed in the situation when FortiAnalyzer does not detect properly RAID storage after one or two failed disk drives.
Scope	FortiAnalyzer with hardware RAID.
Solution	Note: The below-described solution is not a 100% success guaranteed with the log restoration on the new FortiAnalyzer as there can be other unforeseen hardware-related issues with some of the disk drives from old RAID storage. By following these steps, one accepts the risk of losing the data. Common symptoms: After a sudden FortiAnalyzer reboot due to a soft reset of a failed disk drive, FortiAnalyzer CLI shows RAID Status Unavailable with RAID Size 0 GB and Hard Disk Total space as 0 KB: get system status get system performance diagnose system raid status FortiAnalyzer is hung in booting with the message 'Foreign configuration(s) found on adapter' or 'All of the disks from your previous configuration are gone. If this is an unexpected message, then please power off your system and check your cables to ensure all disks are present.'  Note that these messages might be visible only on the LCD screen connected directly to the graphical VGA port on the FortiAnalyzer unit. The standard console port does not support GUI output with RAID Configuration Utility. FAZ Booting RAID Error messages Restoration steps: If one wants to restore RAID storage on a new FortiAnalyzer unit after the failure of the old FortiAnalyzer unit (replacement of the same hardware model) then move all disk drives with the same disk slot position to a new FortiAnalyzer chassis before. Ensure a new FortiAnalyzer is already prepared with the same original OS version and with configuration restored from the latest available config backup of the faulty FortiAnalyzer unit. If just trying to resolve the RAID storage availability issue on the existing FortiAnalyzer, then continue to the next step. To restore RAID storage, it is necessary to connect a USB mouse & keyboard along with an LCD screen to an available VGA port on the FortiAnalyzer unit to see RAID messages during booting as well as the GUI of MegaRAID Configuration Utility. FAZ with USB and VGA port Reboot FortiAnalyzer and monitor booting on the LCD screen. Once seeing the below RAID message with the prompt to load the configuration utility then rapidly press 'C' on a directly connected USB keyboard to enter the MegaRAID BIOS Configuration Utility. FAZ booting - Prompt to load Configuration Utility Select the available RAID adapter and select the Start button. MegaRAID BIOS - Adapter selection On the next screen, a message about detected foreign drives should appear. Select 'All Configurations' and select the Preview button. MegaRAID BIOS - Foreign drives detected On the next screen, review the configuration and if everything looks fine, select the Import button to apply this configuration. MegaRAID BIOS - Configuration Preview & Import Once the configuration is applied, verify Logical View and select the Exit button to reboot FortiAnalyzer. MegaRAID BIOS - Logical View After FortiAnalyzer reboot, verify RAID status and Hard Disk Total space. FAZ RAID restored - System Status FAZ RAID restored - get system performance FAZ RAID restored - RAID Status Useful commands when troubleshooting FortiAnalyzer storage issues: diagnose system raid status diagnose system disk info diagnose system disk health diagnose system disk errors diagnose system disk attributes diagnose system print partitions diagnose system print df diagnose debug klog diagnose log device