FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
calvinc97
Staff & Editor
Staff & Editor
Article Id 378251
Description This article describes how to retrieve diagnostic information of RAID system FortiSIEM Hardware Appliances.
Scope FortiSIEM 3600G, FortiSIEM 2200G, FortiSIEM 3500G, FortiSIEM 2000G, FortiSIEM 3500F, FortiSIEM 2000F, FortiSIEM 500G, FortiSIEM 500F.
Solution

SSH to the FortiSIEM Hardware Appliance via the root:

 

The following commands below gather system health information, related to disk storage and RAID controller status.

They are useful for identifying and troubleshooting disk failures, RAID issues, or hardware problems in FortiSIEM hardware appliances. 

 

Note: the output is saved in the /tmp/ directory.

 

List all physical drives (PDs) connected to the RAID controller, including details like model, serial number, health, and status:

 

/usr/local/megacli/opt/MegaRAID/MegaCli/MegaCli64 -PDList -aAll > /tmp/MegaCli64-PDList

 

Extract firmware logs from the RAID controller, useful for troubleshooting and diagnostics:


/usr/local/megacli/opt/MegaRAID/MegaCli/MegaCli64 -FwTermLog -Dsply -aAll > /tmp/MegaCli64-FwTermLog

 

Display information about logical drives (LDs) configured on the RAID controller, including RAID level, size, and health:

 

/usr/local/megacli/opt/MegaRAID/MegaCli/MegaCli64 -LDInfo -Lall -aAll > /tmp/MegaCli64-LDInfo

 

Collect detailed adapter (RAID controller) information, such as firmware version, memory, and status:

 

/usr/local/megacli/opt/MegaRAID/MegaCli/MegaCli64 -AdpAllInfo -aAll > /tmp/MegaCli64-AdpAllInfo

 

Collect the Battery Backup Unit (BBU) status of the RAID controller, including charge level and health.

 

/usr/local/megacli/opt/MegaRAID/MegaCli/MegaCli64 -AdpBbuCmd -aAll > /tmp/MegaCli64-AdpBbuCmd

 

Retrieve the event log from the RAID controller, which logs drive failures, rebuilds, and other RAID-related events:

 

/usr/local/megacli/opt/MegaRAID/MegaCli/MegaCli64 -AdpEventLog -aAll > /tmp/MegaCli64-AdpEventLog

 

Extract alarm and alert logs from the RAID adapter.

 

/usr/local/megacli/opt/MegaRAID/MegaCli/MegaCli64 -AdpAliLog -aAll > /tmp/MegaCli64-AdpAliLog

 

Retrieves alarm/alert logs from adapter 0 (a0),  the primary RAID controller in the system.


/usr/local/megacli/opt/MegaRAID/MegaCli/MegaCli64 -AdpAliLog -a0 > /tmp/MegaCli64-AdpAliLog-a0

Contributors