Hard reset FortiAnalyzer-BigData

Improperly resetting your FortiAnalyzer-BigData may result in losing all data.

When you hard reset your device, the command resets the OS on each blade and formats all data drives. All log data and configurations will be lost. FortiAnalyzer-BigData shuts down during the reset process. The entire process takes approximately 45 minutes.

You can add an extra option to the reset command to keep certain configurations constant:

• all-settings resets all settings.
• all-except-ip keeps the public IP constant
• all-except-ssh keeps the ssh public key constant.
• all-except-ip-ssh keeps the ssh public key and public IP constant.

For more information about extra CLI options, see the reset command in the CLI Reference in the Fortinet Doc Library..

To reset your FortiAnalyzer-BigData:

Before proceeding with the steps below, your version of FortiAnalyzer-BigData bootloader must match your current version of FortiAnalyzer-BigData. If you do not know the version of your bootloader, it is recommended that you upgrade the bootloader before proceeding. To upgrade the bootloader, see Upgrade Bootloader.

1. Access the Security Event Manager Controller (see To connect to the Security Event Manager Controller:), and run the following command:

   fazbdctl reset cluster [--all-settings|--all-except-ip|--all-except-ssh|--all-except-ip-ssh]

   The Security Event Manager Controller reboots after a few minutes.

2. After the Security Event Manager Controller reboots, re-connect to it and run the following command to verify that all members are detected and that the version is up-to-date:

   fazbdctl show members

3. After verifying that all the members have a Joined state and status is not failed, run the following command to initialize the Security Event Manager:

   fazbdctl init cluster

4. Wait about 45 minutes until the following message is displayed on the terminal:

   [100%] Finished setting up core services.