How to remove a chassis from a stacked setup

If you have an established multi-chassis FortiAnalyzer-BigData Security Event Manager and need to scale down, you can remove any extender chassis you have added to the main chassis.

Removing an extender chassis will hard reset BOTH the extender and the main chassis. All user data and configurations will be lost. The entire process takes approximately an hour.

Remove an extender chassis

To remove an extender chassis:

1. Access the Security Event Manager Controller of the main chassis (see To connect to the Security Event Manager Controller:) and run the following command to stop the DHCP service.

   systemctl stop dhcpd

2. Run the following command to reset all workers in the Security Event Manager.

   fazbdctl -c reset -h members -o all-settings

3. Disconnect the connection between the Internal Switch Modules (Switch Module #1) between the main and extender chassis.
4. Access the Security Event Manager Controller of the main chassis and hard reset FortiAnalyzer-BigData. See Hard reset FortiAnalyzer-BigData.
5. Access the bootloader of Blade A2 on extender chassis. See Bootloader.
6. Use the Set Role command to set the role to controller.
7. Power on Blade A1 of the extender chassis.
8. Access the Security Event Manager Controller of the extender chassis and hard reset FortiAnalyzer-BigData. See Hard reset FortiAnalyzer-BigData.