Error: Failed to retrieve fortiview data

[omkam]

I am using FortiGate 100D v6.4.7.

While I am using Forti view to view the sources, I am getting error as 

"Failed to retrieve Forti view data"

Please help us me resolve this issue at earliest and need explanation for this error

[srajeswaran]

Are you using FortiAnalyzer?  If so, check if you are hitting below issue.

bug#683654 - FortiView pages with FortiAnalyzer source incorrectly display a Failed to retrieve data error on all VDOM views when there is a newly created VDOM that is not yet registered to FortiAnalyzer. The error should only show on the new VDOM view.

[omkam]

Hello Rajeswaran,

Thank you for your response.

I have already checked the mentioned bug ID.

Yes we do have Forti Analyzer in our environment. 

But we do not have vdom created in FortiGate.

So any other suggestion for this error?

[srajeswaran]

Was this working earlier? Can you try changing the source of Fortiview data to FortiGate instead of FortiAnalyzer and check?

[Hasnatriad]

Hi Omkam,

- To view data in Fortiview, disable auto-ASIC-offload, which is enabled by default.

- https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-FortiGate-Logs-are-not-displayed-in/...

[omkam]

Will Auto asic offload command resolve this issue?

 "Failed to retrieve Forti view data"

[Hasnatriad]

Try it if it was not working before. However, it is recommended to disable auto-asic-offload if you want to use fortiview.

[omkam]

So here we should disable Auto asic offload for a particular policy or globally?

[Hasnatriad]

For particular policy for the traffic that you want to view in Fortiview