FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Jonathan_Body_FTNT
Article Id 191226

Description

This article provides troubleshooting help that can be used if the 'Log disk failure is imminent' message is displayed on the Alert log of the FortiGate.


Scope

All FortiGate users


Solution

The FortiGate can sometimes display 'Log disk failure is imminent' in the alert console. This message generally indicates that FortiOS has detected a potential error with the SMART Disk on the FortiGate unit.

The following steps can help to troubleshoot the issue.

1) Verify whether the FortiGate device has a SMART Disk by running the following command on the CLI of the FortiGate:
get sys stat


FGT8003606500274 # get sys stat
Version: Fortigate-800 3.00,build0744,090630
Virus-DB: 8.00631(2008-01-15 14:27)
IPS-DB: 2.00461(2008-01-18 11:23)
Serial-Number: FGT8003606500274
BIOS version: 04000001
Log hard disk: Available
If the 'get sys stat' output shows that the disk is "Not Available", this would indicate there is no disk present in the FortiGate and that the alert message is indeed a discrepancy and a software enhancement might be required.

2) If a disk is available then collect the following output from the CLI:
diagnose sys logdisk smart
diagnose sys logdisk status
3) It would be advisable to perform a backup of the logs by running the following command on the CLI of the device. This can be performed either by FTP or TFTP:
FGT200A-1 # exec backup disk alllogs

ftp backup all logs to ftp server

tftp backup all logs to tftp server
4) In the case where a disk is present but unavailable and inactive, to further test the disk, there are 2 options that can be performed this will test the disk and provide output that could justify an RMA of the device in the case of a faulty disk
diagnose sys logdisk test
A low-level format of the disk could also be performed, however, this will erase all logs from the disk.

If the disk is still in an inactive state after having performed the low-level format then create a FortiCare Support Ticket for further assistance. Include all of the information collected in steps 1 to 4 when creating the ticket.

 

Contributors