FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
akumar02
Staff
Staff
Article Id 274293
Description

Some users are unable to restore configuration on FortiGate and get the error, 'unable to restore due to error Cannot store config due to short of flash space!'.

This article describes how to clear short of flash space in FortiGate Disk partition.

Scope FortiGate v6.4.X and v7.0.X.
Solution

This error is shown because of the full flash space in the FortiGates Disk Partition. 

FortiGate has two disk partitions and the space can be verified using the following CLI command:

 

di sys flash list

 

100% Used100% Used

 

If the 100% flash space is used, then collect the following debugs:

 

# fnsysctl ls -la /data/etc
# fnsysctl df -h
# di sys flash list
# fnsysctl du -s -d 5 /data
# fnsysctl ls /data/node-scripts/report-runner/results -la

 

As shown in the following debug outputs, There were a lot of TopologyReport being generated:

 

FGT # fnsysctl ls /data/node-scripts/report-runner/results -la
drwxr-xr-x 2 0 0 Mon Aug 28 09:52:13 2023 24576 .
drwxr-xr-x 5 0 0 Mon Aug 28 09:52:13 2023 4096 ..
-rw-r--r-- 1 0 0 Sat Aug 26 12:05:19 2023 336076 CoverageReport_1693066384375.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:16:27 2023 239869 CoverageReport_1693070177410.json
-rw-r--r-- 1 0 0 Sat Aug 26 16:26:42 2023 244367 CoverageReport_1693085177750.json
-rw-r--r-- 1 0 0 Sat Aug 26 20:36:44 2023 244051 CoverageReport_1693100178081.json
-rw-r--r-- 1 0 0 Sun Aug 27 00:46:45 2023 244193 CoverageReport_1693115178431.json
-rw-r--r-- 1 0 0 Sun Aug 27 21:36:39 2023 0 CoverageReport_1693190180237.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:05:18 2023 514979 OptimizationReport_1693066384375.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:16:27 2023 511800 OptimizationReport_1693070177410.json
-rw-r--r-- 1 0 0 Sat Aug 26 16:26:42 2023 510486 OptimizationReport_1693085177750.json
-rw-r--r-- 1 0 0 Sat Aug 26 20:36:44 2023 510174 OptimizationReport_1693100178081.json
-rw-r--r-- 1 0 0 Sun Aug 27 00:46:45 2023 510314 OptimizationReport_1693115178431.json
-rw-r--r-- 1 0 0 Sun Aug 27 04:56:47 2023 0 OptimizationReport_1693130178747.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:05:19 2023 182472 PostureReport_1693066384375.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:16:27 2023 191827 PostureReport_1693070177410.json
-rw-r--r-- 1 0 0 Sat Aug 26 16:26:42 2023 203361 PostureReport_1693085177750.json
-rw-r--r-- 1 0 0 Sat Aug 26 20:36:44 2023 203053 PostureReport_1693100178081.json
-rw-r--r-- 1 0 0 Sun Aug 27 00:46:45 2023 203195 PostureReport_1693115178431.json
-rw-r--r-- 1 0 0 Mon Aug 28 01:46:48 2023 0 PostureReport_1693205180566.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:05:19 2023 534726 TopologyReport_1693067830273_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:05:19 2023 547930 TopologyReport_1693068097933_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:05:19 2023 548021 TopologyReport_1693068390950_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:05:19 2023 548021 TopologyReport_1693068725812_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:05:18 2023 548019 TopologyReport_1693068908812_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:05:19 2023 548021 TopologyReport_1693069277094_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:11:53 2023 529399 TopologyReport_1693069903965_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:16:31 2023 519891 TopologyReport_1693070184851_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:22:23 2023 521025 TopologyReport_1693070536013_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:28:40 2023 534325 TopologyReport_1693070912267_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
-rw-r--r-- 1 0 0 Sat Aug 26 12:32:32 2023 538420 TopologyReport_1693071144355_5b44ed1d6b1fe7eaf4cc82a8b528c89f.json
.
.
.

These reports are generated from FortiManager FortiAiOPs.

Once FortiAiOPs are disabled from FortiManager, the report generation will stop and it is necessary to manually clear the Flash space on FortiGate using the following CLI command:

 

diag report-runner clean
di sys flash list

 

61% Used61% Used

 

Also if the Customer does not want to disable FortiManager FortiAiOPs, run  'di sys flash formatdaily as a workaround.

 

This was a known issue in FortiOS 6.4.x and 7.0.X and it has been fixed in 7.0.6 and 7.2.1 already. 

Contributors