Troubleshooting Tip: Prevent 'wrong address' logs from being generated in FSSO Logs

[Ashishdeep]

Description	This article describes how to prevent receiving 'record_dcagent_event:439, wrong address, monitorType:65536' logs in the FSSO agent regarding decommissioned DC.
Scope	FortiGate, FSSO.
Solution	Error message 'dcagent_event:439, wrong address' means that FSSO is trying to pull up event logs from a decommissioned Domain Controller which is no longer available: [ 3552] record_dcagent_event:439, wrong address, monitorType:65536 [ 3556] record_dcagent_event:439, wrong address, monitorType:65536 [ 3552] record_dcagent_event:439, wrong address, monitorType:65536 [ 3556] record_dcagent_event:439, wrong address, monitorType:65536 [ 3552] record_dcagent_event:439, wrong address, monitorType:65536 [ 3556] record_dcagent_event:439, wrong address, monitorType:65536 Could not open the event log “on:asdc02.example.com” In this case, 'on:asdc02.example.com' is a decommissioned domain controller and is not showing in the 'show monitor DC' setting of FSSO. Solution: Delete the DC entry manually of the decommissioned server in the FSSO CA registry.