Description
This article describes how to troubleshoot when FortiView in the root Security Fabric FortiGate does not populate any data, while downstream FortiGates can show.
Scope
FortiAnalyzer, FortiGate.
Solution
Confirmed the configuration in FortiGate, the logs to FortiAnalyzer are enabled, all other settings (Troubleshooting Tip: FortiGate: Logs are not displayed in FortiView) are verified. Make sure the Security Fabric is present in FortiAnalyzer -> Device Manager: Troubleshooting Tip: FortiGate as Security Fabric not showing in FortiAnalyzer.
Check on FortiAnalyzer, in the Log View and FortiView, for a specific filter for the root FortiGate to present the data.
Perform a debug on FortiAnalyzer as per the below command and make sure it detects the device as Security Fabric.
FAZ # diagnose sql debug sqlqry dbgon 5
FAZ # diagnose sql debug sqlqry show
Go to the root FortiGate and refresh the FortiView page.
sql_query.c:2980 P1669 adom_prefix: FSFADOM3(is-sp=0).
sql_query_util.c:340 P1669 local_dev=0 dev_grp_name=csf:csf-test adom=root
sql_query_util.c:374 P1669 devgrp:csf:csf-test.
sql_query_util.c:300 P1669 pop [0], dev:csf:csf-test.
sql_query_util.c:547 P1669 devgrp: csf:csf-test
sql_query_util.c:461 P1669 devgrp: 'csf:csf-test'.
sql_query_util.c:556 P1669 Start call sqlrpt_devid_vd_cache_build
sql_query_util.c:559 P1669 Finish sqlrpt_devid_vd_cache_build took 0 sec
sql_query_util.c:1091 P1669 hcache_enabled=0 before csf:csf-test, get vdlist
sql_query_util.c:1091 P1669 hcache_enabled=0 before csf:csf-test, get vdlist
sql_query.c:2921 P1669 : sql_rewriter took 0.9176 sec
Lastly, if the issue persists, check the configuration on the root FortiGate and make sure 'certificate-verification' is enabled.
Related articles:
