Fortimanager trying to push device level change

[vilas01]

Every time I try and push out anything with the fortimanager, its trying to push out a device level change and for the life of me, I cannot tell where its coming from. I want to delete it but the change is not coming from any of the device configs or system templates. Anyone know how to tell in the fortimanager where this is coming from?

I have fortianalyzer cloud disabled but its trying to set it to "realtime" for some reason.

fortigate $ config log fortianalyzer-cloud setting

fortigate (setting) $ set upload-option realtime

fortigate (setting) $ end

[Richie_C]

Hi

You can check the FortiManager database with the following command:

execute fmpolicy print-device-object <ADOM> <DEVICE> <VDOM> "log fortianalyzer-cloud setting"

Replace the ADOM/DEVICE/VDOM as appropriate. Question mark is your friend with this command :)

I guess you have tried to retrieve the full configuration in order to overwrite the config.

Thanks

Richard

[Richie_C]

If you are running 7.2.1, i can see that there is a known issues with the FortiAnalyzer cloud config. Fixed in the next GA release 7.2.2