Missing graphics in custom report

[rvogt]

Hi

We do custom reports on traffic usage using FortiAnalyzer (v5.2.4). Our custom reports looks as expected if generated for a time period of two week. However if I choose a longer time period (e.g. 30 days) some of the graphics in the report are empty ("No matching log data for this report"). The behavior is not always the same. Sometimes the graphics are in the report, sometimes not.

Further if we try to execute the corresponding sql query (e.g. for a time period of 30 days) via command line ("execute sql-query-dataset ...") we get the following error:

Internal error. Command fail. Return code 1

What can we do to further debug this situation? Is there a possibility to get more information about this "Internal error"?

[JoseOrosco]

Can you please add the query you are trying to execute?

[hzhao_FTNT]

Hi there,

The "Internal error." in dataset test console is caused by postgres DB out of memory. This console is only for testing purpose, please limit your time period.

The empty report issue could be happened when:

1. device quota reached

and

2. log rate is high.

When above two criteria met, old log files will be dropped during report generation, hcache table creation can not find related log tables. This issue will be improved in 5.4.0.

Current workaround:

1. increase device quota

or

2. limit report time period.

Thanks,

hz