Fortinet black logo

Cookbook

6.2.0

Common issues

Common issues

The following table provides a list of common issues that may produce an empty chart in a report:

Issue

Description

Wrong report filter applied

Go to Log View and search for:

  • Field “status” changed to “action” (since 5.0.6)
  • Data type of srcip and dstip changed from string to inet.
Log field changed after upgrade

This can be identified by a dataset test console or SQL debug.

Hcache corrupt Clear hcache before running the report (dia sql remove hcache).
Log traffic
  • High log rate (diagnose fortilogd lograte)
  • Device or ADOM quota reached (diagnose log device)
“logver” issue

Some datasets are using field “logver” to identify FOS log version.

Go to Log View and search for logver=*

If there are no records, you may need to upgrade.

"out of memory”

File system error. This occurs mostly in 5.2.

Common issues

The following table provides a list of common issues that may produce an empty chart in a report:

Issue

Description

Wrong report filter applied

Go to Log View and search for:

  • Field “status” changed to “action” (since 5.0.6)
  • Data type of srcip and dstip changed from string to inet.
Log field changed after upgrade

This can be identified by a dataset test console or SQL debug.

Hcache corrupt Clear hcache before running the report (dia sql remove hcache).
Log traffic
  • High log rate (diagnose fortilogd lograte)
  • Device or ADOM quota reached (diagnose log device)
“logver” issue

Some datasets are using field “logver” to identify FOS log version.

Go to Log View and search for logver=*

If there are no records, you may need to upgrade.

"out of memory”

File system error. This occurs mostly in 5.2.