FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
nevan
Staff
Staff
Article Id 415976
Description This article describes the issue log hard disk showing 'Need Format' from the command 'get system status' and steps to be taken after getting the message.
Scope FortiGate, FortiGate VMx.
Solution

The log hard disk may stop showing logs, and from the hard disk status with the cli command 'get system status' may show 'Need format'.


CLI:

get system status
Log hard disk: Need format


If this situation is observed, the first step is to check the hard disk status.

CLI:

diagnose hardware deviceinfo disk

Disk SYSTEM(boot) 2.0GiB type: HV [Msft Virtual Disk Rev: 1.0] dev: /dev/sda (hcil=0.0.0.0)
partition 355.0MiB, 244.0MiB free mounted: Y label: dev: /dev/sda1(boot) start: 2048
partition 1.6GiB, 881.0MiB free mounted: Y label: dev: /dev/sda2(boot) start: 788480


Disk HD1 ref: 16 127.0GiB type: HV [Msft Virtual Disk Rev: 1.0] dev: /dev/sdb (hcil=1.0.1.0)

partition ref: 17 124.4GiB, 114.1GiB free mounted: Y label: LOGUSEDXB77E2A08 dev: /dev/sdb1 start: 2048


Total available disks: 2

Max SSD disks: 16 Available storage disks: 1


It is needed to check if the disk is mounted. If mounted will share the status 'mounted: Y'. Then need to check if there are free spaces or not. If the disk has free spaces will show 'xxGiB/xxMiB free'. Lastly, the 'Available storage disks' will show the number of log disks. The log above shows 'Total available disks' showing two disks, as the first disk /dev/sda is being used for the boot system, and the second disk /dev/sdb is being used for logging.

If a disk is available and there is storage, it is needed to format the log disk. It is requested to store the logs securely and format the correct disk if there are multiple disks for logging. 

The article Technical Tip: Standard procedure to format a FortiGate Log Disk, log backup from disk can be followed to format the log disk. Once the format is done, the issue should be resolved.

If the issue, still there, it is requested to eject and re-insert the disk if the log disk is portable or replace the disk. It is requested to contact the Fortinet Technical Assistance Center to review the hardware with the (Technical Tip: RMA - HQIP test (with built-in FortiOS diagnostic commands)) HQIP test if the unit requires the RMA.