Description | This article describes the requirement of diagnostic outputs and debugs for certain issues. |
Scope | FortiGate. |
Solution |
Logging and debugging are both essential tools for troubleshooting, but they serve different purposes.
Logging records events and information for later analysis and troubleshooting, while debugging is the process of actively finding and fixing errors.
Debugging helps identify the root cause of an issue, while logging provides a trail of clues for later investigation.
Even though the logs provide information for later analysis, they contain minimal information, which the TAC will have a hard time concluding or finding a cause for the issue.
Debug logs, which are taken at the time of an issue, provide more vital information that will be required for identifying and fixing the issue.
The example below will show the difference between the logs and debugs collected for the same issue :
Scenario: High CPU.
The system events below show that the CPU is at 99%.
type="event" subtype="system" logdesc="System performance statistics" cpu=99 mem=25 totalsession=1081381 disk=0 bandwidth="1788670/1766901" setuprate=9220 sysuptime=378642 waninfo="N/A" concurrent sessions: 1081381, setup-rate: 9220"
The logs indicate the CPU was at 99% but does not describe what was causing the CPU to go high.
The below diagnostic command shows what process was consuming more CPU at the time issue.
diagnose sys top
Conclusion : Ultimately, for certain issues like the above, diagnostic command outputs and debugs will be required to pinpoint the issue. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.