FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
Anthony_E
Community Manager
Community Manager
Article Id 193838

Description


This article describes the situation when manual report generation works fine but scheduled reports are not being generated.

 

Scope

 

FortiAnalyzer.

Solution

 

Make sure 'Report Owner' has been selected at the bottom of the Advanced Settings page:
Reports, choose and edit the report -> Settings -> Advanced Settings -> Report Owner, and choose the owner.

Add the 'Report Owner' on all the scheduled reports.


 
Go to Check Report -> Output Profile if the correct SMTP server is configured. In case there are more SMTP servers configured, select the correct one.
 
  
Run the following command:
 
diagnose system fsck harddisk
This operation will check and repair the file system, then reboot the system.
Do you want to continue? (y/n)y
 
Manually rebuild hcache tables for the reports (see related article).
 
Check whether the /tmp folder has any space left. If not, restart the FortiAnalyzer:
 
diagnose system print df
 
If the issue remains, please contact Fortinet TAC Support and provide additional details to the ticket, such as the output of the following commands:
 
diagnose test application sqlreportd 99
exe tac report

Set a new scheduled report, enable the following debug, and attach the outputs to the ticket. The debug has to be running while the scheduled report is being generated.
 
diagnose debug disable
diagnose debug reset
diagnose debug application sqlreportd 255
diagnose debug enable
 
After that, disable the debug:
 
diagnose debug disable
diagnose debug reset

 

Related articles:

Technical Tip: When a manual rebuild of hcache tables is advisable
Troubleshooting Tip: Report Generation Issues on FortiAnalyzer