FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
Anthony_E
Community Manager
Community Manager
Article Id 193838

Description
This article describes the situation when manual report generation works fine but scheduled reports are not being generated.

Solution
1) Make sure 'Report Owner' has been selected at the bottom of the Advanced Settings page:

Reports, choose and edit the report -> Settings -> Advanced Settings -> Report Owner and choose the owner.

Add the 'Report Owner' on all the scheduled reports.



 
 
2) Go to Check Report -> Output Profile if correct SMTP server is configured.
In case there are more SMTP servers configured, select the correct one.
 
 
 
 
3) Run following command:
# diagnose system fsck harddisk
This operation will check and repair the file system, then reboot the system.
Do you want to continue? (y/n)y
4) Manually rebuild hcache tables for the reports:
See related article.
 
5) Check whether the /tmp folder has any space left. If not, restart the FortiAnalyzer:
# diagnose system print df
6) If the issue remains, please contact Fortinet TAC Support and provide additional details to the ticket such as output of following commands:
# diag test application sqlreportd 99
# exe tac report

Set a new scheduled report, enable the following debug and attach the outputs on the ticket.
The debug has to be running while the scheduled report should be generated.
# diagnose debug disable
# diagnose debug reset
# diagnose debug application sqlreportd 255
# diagnose debug enable
After that, disable the debug:
# diagnose debug disable
# diagnose debug reset

 

Related Articles

Reporting: When is a manual rebuild of hcache tables advisable?