FortiAnalyzer Generating Spurious VDOMS

[pgmsgwpr]

I'm running a FortiAnalyzer 1000C with firmware v5.2.4

Under the Device manager tab, I'm seeing non-existing VDOMS being generated for some of the Fortigates logging to the analyzer with names 'r', 'ro' 'roo'

There is only a 'root' VDOM on each of the Fortigates but appears the analyzer is creating new ones by appending letters from the root VDOM.

To get rid of I have to physically delete them on a regular basis.

Has anyone had or seen this problem?

Fortinet say this should be fixed in 5.2.4 but obviously is not.

Thanks,

[scao_FTNT]

Hi, pgmsgwpr, we are still investigating for this issue case, it might be triggered by some logs, and will try to fix for next release.

Thanks

Simon

[pgmsgwpr]

We are now on release 5.2.10 on the Analyzer and the problem is not fixed.

Not holding out much hope of a fix.

Perhaps, time to look at alternative solution.

[scao_FTNT]

Hi, Winnnie, sorry you still see the issue in 5.2.10, just to confirm on 5.2.10, so you deleted these VDOMs in "Device Manager" and then these VDOMs auto generated again?

Thanks

Simon