FortiManager can't add to FortiAnalyzer

[Rotta]

Hi Everyone

I added fortianalyzer to fortimanager but fortimanager removes fortianalyzer immediately after successful addition. What should I do to fix this?

fortimanager (VM on hyper-V) v7.6.3 build3492 

fortianalyzer (box) v7.4.5 build2553 (Mature)

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Jean-Philippe_P]

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

[Jean-Philippe_P]

Hello Rotta,

I found this solution. Can you tell us if it helps, please?

To address the issue where FortiManager removes FortiAnalyzer immediately after successful addition, follow these steps:

1. Version Compatibility: Ensure that both FortiManager and FortiAnalyzer are running compatible versions. They should ideally be on the same major version to avoid compatibility issues.
   
   
2. FortiAnalyzer Features: Verify that FortiAnalyzer features are not enabled on FortiManager. If FortiAnalyzer features are enabled, it will not be possible to add FortiAnalyzer to FortiManager. You can check this in the FortiManager GUI under System Settings -> Dashboard -> System Information widget. Ensure the 'FortiAnalyzer Features' switch is turned off.
   
   
3. Network Connectivity: Confirm that there is proper network connectivity between FortiManager and FortiAnalyzer. Check for any network issues or firewall rules that might be blocking communication.
   
   
4. Licensing and Registration: Ensure that both devices are properly licensed and registered with FortiCare. Any issues with licensing can cause management problems.
   
   
5. Logs and Debugging: Enable debugging on FortiManager to gather more information about why the FortiAnalyzer is being removed. Use the following commands on FortiManager CLI to collect logs: 
   diagnose debug disable
   diagnose debug reset
   diagnose debug application depmanager 255
   diagnose debug application dmworker 255
   diagnose debug application securityconsole 255
   diagnose deb service dvmcmd 255
   diagnose debug application dmapi 255
   diagnose debug enable
   
   After reproducing the issue, disable debugging with:
   diagnose debug disable
   diagnose debug reset
   
   
6. Review Logs: Check the logs collected to identify any specific errors or messages that indicate why the FortiAnalyzer is being removed.

If the issue persists after following these steps, consider reaching out to Fortinet support for further assistance.