Fortianalyzer not showing logs

[cos]

Hello,

We have 4 fortigates which are configured to send all the logs to the FortiAnalyzer. The point is that we dont see any logs in "fortiview and log view", but the device is receiving logs. Its stuck like loading the information.

We also can not see the logs in the fortigate configuring the FortiAnalyzer like source.

Whats happening with the logs???

I attached a screenshot about that we see in fortiview.

thanks,

regards,

Jesus

[cos]

ANy advice????

[Genesis]

run  exe top and check the mem utilization particularly the 'phyton' service. If it's high, you can kill it.

diagnose sys process kill -9 <pid>

[cos]

ok but wich is the command to go up the process phyton again???? or it should be go up by itself???? it could be produce any impact in the service??

[scao_FTNT]

Hi, cos, I may need you to open a ticket and provide like FAZ db config for investigation

we may need to use ticket to track this issue

Thanks

Simon

[scao_FTNT]

some detailed info we may need

diag dvm device list

diag log device

diagnose fortilogd msgrate-device

diagnose fortilogd lograte

diag debug enable

diagnose sql status sqlplugind

diag sql process list

thanks

simon

[cos]

I agree with you. 

we will send all the necessary information. First I requests to administrator privileges to my user. Because I get this:

FAZ2000B $ diagnose dvm device list

No permission to 'diag dvm'

As soon as I get the information that you have asked me. I sent it.

Regards,

Diego C.

[cos]

I agree with you. 

we will send all the necessary information. First I requests to administrator privileges to my user. Because I get this:

FAZ2000B $ diagnose dvm device list

No permission to 'diag dvm'

As soon as I get the information that you have asked me. I sent it.

Regards,

Diego C.

[scao_FTNT]

Hi, cos, pls send me the ticket ID after you open one, I will monitor / update your ticket

Thanks

Simon

[cos]

Hi

I am trying to open a ticket. But before telling me that I must register the product.

https://support.fortinet....RegistrationEntry.aspx

I am trying to register the FortiAnalyzer with Serial Number FL2KB3R12600025, but it shows me "Invalid input data"

FortiAnalyzer

Serial Number FL-2KB3R12600025

Firmware Version v5.0.7-build0321 140627 (GA)

Regards,

[scao_FTNT]

Hi, cos, sorry, I am not that familiar with ticket system and you may need to call our support team to create a ticket for you

Thanks

Simon