Hi
We do custom reports on traffic usage using FortiAnalyzer (v5.2.4). Our custom reports looks as expected if generated for a time period of two week. However if I choose a longer time period (e.g. 30 days) some of the graphics in the report are empty ("No matching log data for this report"). The behavior is not always the same. Sometimes the graphics are in the report, sometimes not.
Further if we try to execute the corresponding sql query (e.g. for a time period of 30 days) via command line ("execute sql-query-dataset ...") we get the following error:
Internal error. Command fail. Return code 1
What can we do to further debug this situation? Is there a possibility to get more information about this "Internal error"?
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Can you please add the query you are trying to execute?
Hi there,
The "Internal error." in dataset test console is caused by postgres DB out of memory. This console is only for testing purpose, please limit your time period.
The empty report issue could be happened when:
1. device quota reached
and
2. log rate is high.
When above two criteria met, old log files will be dropped during report generation, hcache table creation can not find related log tables. This issue will be improved in 5.4.0.
Current workaround:
1. increase device quota
or
2. limit report time period.
Thanks,
hz
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1702 | |
1092 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.