FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
This article describes how to troubleshoot the issue with the inability to access the management GUI of the FortiAnalyzer-BigData.
Scope
FortiAnalyzer-BigData 4500G.
Solution
Occasionally, the initial setup for the FortiAnalyzer-BigData unit can present challenges. Here are some aspects that need to be checked from the CMM:
Port speed: When connecting FortiAnalyzer-BigData to the external network switches from Switch Module #2 via 100G/QSFP28 or 40G/QSFP+ transceiver, it's better to modify the port speed manually on both sides' switches.
STP setting: If BPDU guard is enabled on the peer network switches, upon receiving a BPDU from FortiAnalyzer-BigData, the interface on the peer switch will go to err-disabled status. Hence, it's required to turn off STP BPDU from FortiAnalyzer-BigData.
Blade status: Sometimes the blades might not power on; it is required to check the blades' hardware power status and ensure the blades' power status is green.
Cluster reset: If all the blades and the network interfaces are up and running, the FortiAnalyzer-BigData cluster is ready for management access. In case of HTTPS service is not up, it requires SSH access to reset the cluster.
