Description
This article describes and explains an issue where a FortiGate 1800F/1801F platform generates 'interface-stat-change' system event logs after an upgrade to 7.0.14/7.2.8.
Scope
FortiGate 1800F/1801F.
Solution
The following logs are generated, but the events are a false positive. The example below is triggered on port1-24 with DOWN status (meaning the status is unused or administratively down).
date=2024-02-16 time=05:14:30 eventtime=1708085670465834266 tz="-0700" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="DOWN" msg="Link monitor: Interface port11 was turned down" date=2024-02-16 time=05:14:29 eventtime=1708085669425831522 tz="-0700" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="UP" msg="Link monitor: Interface port11 was turned up" date=2024-02-16 time=04:54:29 eventtime=1708084470305935487 tz="-0700" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="DOWN" msg="Link monitor: Interface port21 was turned down" date=2024-02-16 time=04:54:28 eventtime=1708084469299883215 tz="-0700" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="UP" msg="Link monitor: Interface port21 was turned up"
This known issue will be resolved in the upcoming FortiOS release 7.0.16, 7.2.9, 7.4.4.
