Troubleshooting Tip: Download Debug Report Summary from FortiAuthenticator via GUI or via CLI with TFTP/FTP

[nathan_h]

Description	This article describes how to download the Summary Debug Report from FortiAuthenticator via GUI or via CLI with TFTP/FTP. The Debug Report can afterwards be attached to a ticket with Fortinet Technical Assistance Center (TAC).
Scope	FortiAuthenticator.
Solution	In some cases where it is not possible to download the report-summary.dbg due to a gateway timeout error, it is possible to use CLI as an alternative method to download the Summary debug report from FortiAuthenticator versions 6.3 and 6.4. First GUI Method for collecting the Summary debug report log: TAC Support may ask users to download the Debug Report Summary, or a another debug report from GUI -> Log Access -> Log section. In FortiAuthenticator 6.2 and lower, the Debug Report option looks like in the following example: In versions between 6.2 and 6.4, the Debug Report Button has changed slightly: In FortiAuthenticator Version 6.4.x+, it is possible to find the 'Summary debug log' under Logging -> Log Access -> Logs: The file 'report-summary.dbg' is encrypted and is meant for Fortinet TAC. The resulting report.dbg or report-summary.dbg contains the latest logs but with less duration than what is visible in the https://fac-ip/debug menu. Second CLI Method to download the Summary debug log report: In certain setups, it is possible that the GUI download of the Debug Report Summary would not be possible, and would result in a 'Gateway Timeout' error displayed. In this case, is possible to use any TFTP/FTP server application to download the debug log. In the following example, 'WinAgents TFTP Server Manager' is used. It is necessary to download, install, and run the app as a local server. SSH to FortiAuthenticator via PuTTY or any SSH tool. Run the following command: execute backup debug-report tftp <filename> <server fqdn|ipaddr> Or with an FTP server, use the following command: execute backup debug-report ftp <path> <server fqdn|ipaddr>[:port] [ftp_user] [ftp_password] Related articles: Troubleshooting Tip: How to work with FortiAuthenticator Technical Support.  Troubleshooting Tip: How to debug FortiAuthenticator Services.  Technical Tip: FortiAuthenticator log timeouts (Gateway Timeout)