Troubleshooting Tip: FortiGate 1800F/1801F frequently generates an 'interface-stat-change' log after upgrading to 7.0.14/7.2.8

[ccho]

Description

This article describes and explains an issue where a FortiGate 1800F/1801F platform generates 'interface-stat-change' system event logs after an upgrade to 7.0.14/7.2.8.

Scope

FortiGate 1800F/1801F.

Solution

The following logs are generated, but the events are a false positive. The example below is triggered on port1-24 with DOWN status (meaning the status is unused or administratively down).

date=2024-02-16 time=05:14:30 eventtime=1708085670465834266 tz="-0700" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="DOWN" msg="Link monitor: Interface port11 was turned down" date=2024-02-16 time=05:14:29 eventtime=1708085669425831522 tz="-0700" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="UP" msg="Link monitor: Interface port11 was turned up" date=2024-02-16 time=04:54:29 eventtime=1708084470305935487 tz="-0700" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="DOWN" msg="Link monitor: Interface port21 was turned down" date=2024-02-16 time=04:54:28 eventtime=1708084469299883215 tz="-0700" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="UP" msg="Link monitor: Interface port21 was turned up"

This known issue will be resolved in the upcoming FortiOS release 7.0.16, 7.2.9, 7.4.4.