FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
Fadel
Staff
Staff
Article Id 206247

Description

 

This article describes how to stop a long log backup job on FortiAnalyzer if the recommended methods (See the 'Related Article' section at the bottom) do not work:

 

- Run a second backup job to cancel the initial one.

- Issue the command 'diagnose test app uploadd 57'

 

Solution

 

After having launched a backup task from CLI using:

 

# execute backup logs <device name(s)| all> <ftp/sftp/scp> <ip> <user name> <password> <directory

 

Backup Log.png

 

 

To stop this ongoing backup task, connect to the FortiAnalyzer via SSH then execute below commands.

 

Enable Shell access:

 

# config system admin setting

(setting)set shell-access enable

Enter new password:         <-----It is possible to use an empty password */

Confirm new password:

(setting)end

 

Then issue the following commands:

 

# execute shell

Enter password:poss

bash$ redis-cli -p 6380

127.0.0.1:6380> keys *backup*

1) "cli:exec:backup:cmd:hash"

127.0.0.1:6380> del "cli:exec:backup:cmd:hash"

(integer) 1

127.0.0.1:6380> exit

bash$ exit

 

Delete backup job.png

 

The backup job has been interrupted and it is possible launch it again later.

 

Related Article.

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Stop-ongoing-FortiAnalyzer-backup/ta-p...

Contributors