Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    Home FortiAnalyzer 7.0.12 CLI Reference
    7.0.12
    7.6.1
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.0.12
    6.0.11
    6.0.10
    6.0.9
    6.0.8
    6.0.7
    6.0.6
    6.0.5
    6.0.4
    6.0.3
    6.0.2
    6.0.1
    6.0.0
    5.6.11
    5.6.10
    5.6.9
    5.6.8
    5.6.8
    5.6.7
    5.6.7
    5.6.6
    5.6.6
    5.6.5
    5.6.5
    5.6.4
    5.6.4
    5.6.3
    5.6.3
    5.6.2
    5.6.2
    5.6.1
    5.6.1
    5.6.0
    5.6.0
    5.4.7
    5.4.6
    5.4.5
    5.4.5
    5.4.4
    5.4.4
    5.4.3
    5.4.3
    5.4.2
    5.4.2
    5.4.1
    5.4.1
    5.4.0
    5.4.0
    5.2.10
    5.2.9
    5.2.9
    5.2.7
    5.2.7
    5.2.6
    5.2.6
    5.2.5
    5.2.5
    5.2.4
    5.2.4
    5.2.3
    5.2.3
    5.2.2
    5.2.1
    5.2.0
    5.0.13
    5.0.13
    5.0.11
    5.0.11
    5.0.10
    5.0.9
    5.0.8
    5.0.7
    5.0.6
    5.0.5
    5.0.4
    5.0.3
    5.0.2
    5.0.1
    4.3.0
    4.2.0
    4.1.0
    4.0.0

    sql

    sql

    Use this command to diagnose the SQL database.

    sql config

    Use this command to show, set, or reset the SQL database configuration.

    Syntax

    diagnose sql config auto-cache-delay [set <seconds>| reset]

    diagnose sql config debug-filter [set | test] <daemon> <string>

    diagnose sql config deferred-index-timespan [set <value>]

    diagnose sql config hcache-agg-step [reset | set <integer>]

    diagnose sql config hcache-base-trim-interval [reset | set <integer>]

    diagnose sql config hcache-max-base-row [reset | set <integer>]

    diagnose sql config hcache-max-fv-row [reset | set <integer>]

    diagnose sql config hcache-max-fv-row-per-timescale [reset | set <integer>]

    diagnose sql config hcache-max-rpt-row [reset | set <integer>]

    diagnose sql config sampling-max-row [reset | set <integer>]

    diagnose sql config sampling-status [reset | set <integer>]

    diagnose sql config sampling-type [reset | set <integer>]

    Variable

    Description

    auto-cache-delay [set <seconds>| reset]

    Show, set, or reset the auto-cache delay, in seconds (default = 300).

    debug-filter {set | test} <daemon> <string>

    Show sqlplugind and sqlreportd debug filter. Enter sqlplugind, sqlreportd or both as the <daemon>. Enter the filter string.

    deferred-index-timespan [set <value>]

    View or set the time span for the deferred index (default = 10000).

    hcache-agg-step [reset | set <integer>]

    Show, set, or reset the hcache aggregation step (default = 10).

    hcache-base-trim-interval [reset | set <integer>]

    Show, set, or reset the hcache base trim interval (3600 - 2147483647, default = 172800).

    hcache-max-base-row [reset | set <integer>]

    Show, set, or reset max row number for base hcache (1000 - 1500000, default = 1000000).

    hcache-max-fv-row [reset | set <integer>]

    Show, set, or reset max row number for fortiview hcache (1000 - 400000, default = 50000).

    hcache-max-fv-row-per-timescale [reset | set <integer>]

    Show, set, or reset max row number per timescale for FortiView hcache (0 - 40000, default = 0).

    hcache-max-rpt-row [reset | set <integer>]

    Show, set, or reset max row number for report hcache (1000 - 400000, default = 18000).

    sampling-max-row [reset | set <integer>]

    Show, set, or reset max row number for sampling (1000 - 10000000, default = 1000000).

    sampling-status [reset | set <integer>]

    Show, set, or reset the sampling status. Enter 0 for disabling and 1 for enabling the sample status (0 - 1, default = 1).

    sampling-type [reset | set <integer>]

    Show, set, or reset the type of sampling (0 - 1, default = 0).

    sql debug

    Use this command to show or update the SQL debug statuses.

    Syntax

    diagnose sql debug hcache-agg dbgoff

    diagnose sql debug hcache-agg dbgon

    diagnose sql debug hcache-agg delete

    diagnose sql debug hcache-agg show [<filter>][<NUM>]

    diagnose sql debug hcache-agg upload {ftp | sftp} <host> <dir> <user name> <password>

    diagnose sql debug logview dbgoff

    diagnose sql debug logview dbgon <level value>

    diagnose sql debug logview delete

    diagnose sql debug logview show [<filter>] [<NUM>]

    diagnose sql debug logview upload {ftp | sftp} <host> <dir> <user name> <password>

    diagnose sql debug pglog show [<filter>] [<NUM>]

    diagnose sql debug pglog upload {ftp | sftp} <host> <dir> <user name> <password>

    diagnose sql debug sqlqry dbgoff

    diagnose sql debug sqlqry dbgon <level value>

    diagnose sql debug sqlqry delete

    diagnose sql debug sqlqry show [<filter>][<NUM>]

    diagnose sql debug sqlqry upload {ftp | sftp} <host> <dir> <user name> <password>

    Variable

    Description

    hcache-agg dbgoff

    Disable hcache-agg debug output.

    hcache-agg dbgon

    Enable hcache-agg debug output.

    hcache-agg delete

    Delete hcache-agg debug file.

    hcache-agg show [<filter>] [<NUM>]

    Show the last 10 lines of the hcache-agg debug file. Set filter for the debug file, and show the last NUM lines of the debug file. The filter and NUM variables are optional.

    hcache-agg upload {ftp | sftp} <host> <dir> <user name> <password>

    Upload hcache-agg debug file to FTP or SFTP server. Enter host IP address, directory, user name, and password.

    logview dbgoff

    Disable Log view debug output.

    logview dbgon <level value>

    Enable log view debug output. Set log view debug level (1-5). Default level is 1.

    logview delete

    Delete log view debug file.

    logview show [<filter>] [<NUM>]

    Show the last 10 lines of the Log view debug file. Set filter for debug file, and show last NUM lines of the debug file. The filter and NUM variables are optional.

    logview upload {ftp | sftp} <host> <dir> <user name> <password>

    Upload log view debug file to FTP or SFTP server. Enter host IP address, directory, user name, and password.

    pglog show [<filter>] [<NUM>]

    Show the last 10 lines of the Postgres log debug file. Set filter for debug file, and show last NUM lines of the debug file. The filter and NUM variables are optional.

    pglog upload {ftp | sftp} <host> <dir> <user name> <password>

    Upload Postgres log debug file to FTP or SFTP server. Enter host IP address, directory, user name, and password.

    sqlqry dbgoff

    Disable SQL query debug output.

    sqlqry dbgon <level value>

    Enable SQL query debug output. Set SQL query debug level (1-5). The default level is 1.

    Note: When the debug level is 5, the final SQL running in sqlreportd will show in the debug output as well.

    sqlqry delete

    Delete the SQL query debug file.

    sqlqry show [<filter>] [<NUM>]

    Show the last 10 lines of the SQL query debug file. Set filter for the debug file, and show the last NUM lines of the debug file. The filter and NUM variables are optional.

    sqlqry upload {ftp | sftp} <host> <dir> <user name> <password>

    Upload SQL query debug file to FTP or SFTP server. Enter host IP address, directory, user name, and password.

    sql hcache

    Use this command to show or update the SQL hcache.

    Syntax

    diagnose sql hcache add-task agg <adom> <norm-query-hash> <agg-level> <timestamp> <num-of-days>

    diagnose sql hcache add-task agg-update <adom> <hid>

    diagnose sql hcache dump-task <filter>

    diagnose sql hcache list <adom> <query-hash/tag> <filter> <detail>

    diagnose sql hcache plan <adom> <start-time> <end-time> <query-tag/norm-qry-hash/sql> <is-fortiview> <max-time-scale>

    diagnose sql hcache rebuild-both <start-time> <end-time>

    diagnose sql hcache rebuild-fortiview <start-time> <end-time>

    diagnose sql hcache rebuild-report <start-time> <end-time>

    diagnose sql hcache rebuild-status

    diagnose sql hcache show hcache <adom> <id>

    diagnose sql hcache show hcache-query <adom> <norm-qry-hash>

    diagnose sql hcache show hcache-res-tbl <adom> <res-tbl-id>

    diagnose sql hcache show time <time> <time> <time> <time>

    diagnose sql hcache status {all | <adom> | all-summary}

    Variable

    Description

    add-task agg <adom> <norm-query-hash> <agg-level> <timestamp> <num-of-days>

    Add an hcache agg task. The following input is required:

    • adom: The ADOM name.
    • norm-query-hash: The normalized query hash.
    • agg-level: The aggregation level.
    • timestamp: The timestamp (format = yyyy-mm-dd hh:mm:ss).
    • num-of-days: The number of days (1, 3, or 30).

    add-task agg-update <adom> <hid>

    Add an hcache agg update task. The following input is required:

    • adom: The ADOM name.
    • hid: The hcache agg ID.

    dump-task <filter>

    Dump hcache tasks. Enter the task filter.

    list <adom> <queryhash/tag> <filter> <detail>

    List hcaches:

    • adom: The ADOM name.

    • query-hash/tag: The hash or tag filter query, or all for all queries.

    • filter: Narrow down the hcache list search result by using a filter. The filter keywords include:

      • status: The hcache status. 0(Ready), 1(Ready-Loss), 2(In-Building), 3(Error), 4(Invalid-SQL ), 5(No-Data), 6(Not-Ready).

      • fv_flag: List FortiView/report only. 1(fortiview), 0(report).

      • sql: The SQL query match. '*' for wildcard, e.g. *select*.

      • time_start: Start of the log time. format: yyyy-mm-dd hh:MM:ss.

      • time_end: End of the log time. format: yyyy-mm-dd hh:MM:ss.

      The following shows an example of the variable <filter>:

      "status=0,1,5 sql=\"*srcip, dstip*\" time_start>=\"2020-11-01 00:00:00\" time_end<=\"2020-11-30 23:59:59\"".

      Enter "" for no filter.

    • detail: Show detailed information.

    plan <adom> <start-time> <end-time> <query-tag/norm-qry-hash/sql> <is-fortiview> <max-time-scale>

    Plan hcaches:

    • adom: The ADOM name.
    • start-time: The start time (format: yyyy-mm-dd hh:mm:ss).
    • end-time: The end time (format: yyyy-mm-dd hh:mm:ss).
    • query-tag/norm-qry-hash/sql: The query tag, normalized query hash, or sql statement.
    • is-fortiview: Enter 1 for FortiView, or 0 for report.
    • max-time-scale: Maximum timescale.

    rebuild-both <start-time> <end-time>

    Rebuild hcache for both report and FortiView. Start and end times are in the format yyyy-mm-dd hh:mm:ss.

    rebuild-fortiview <start-time> <end-time>

    Rebuild hcache for FortiView only. Start and end times are in the format yyyy-mm-dd hh:mm:ss.

    rebuild-report <start-time> <end-time>

    Rebuild hcache for report only. Start and end times are in the format yyyy-mm-dd hh:mm:ss.

    rebuild-status

    Show report hcache rebuild/check status.

    show hcache <adom> <id>

    Show hcache information. Enter the ADOM name and hcache ID.

    show hcache-query <adom> <norm-qry-hash>

    Show hcache query information. Enter the ADOM name and the normalized query hash.

    show hcache-res-tbl <adom> <res-tbl-id>

    Show hcache result table information. Enter the ADOM name and the result table ID.

    show time <time> <time> <time> <time>

    Show hcache time. Enter up to four timestamps.

    status {all | <adom> | all-summary}

    Show detailed hcache information per ADOM, for all ADOMs, or display the summary.

    sql process

    Use this command to kill or list query processes in the the SQL database.

    Syntax

    diagnose sql process kill <pid>

    diagnose sql process list [full]

    Variable

    Description

    kill <pid>

    Kill a running query.

    list [full]

    List running query processes.

    sql remove

    Use this command to remove from the SQL database.

    Syntax

    diagnose sql remove {hcache <adom> <start-time> <end-time> | query-cache | rebuild-db-flag | tmp-table}

    Variable

    Description

    {hcache <adom> <start-time> <end-time> | query-cache | rebuild-db-flag | tmp-table}

    Remove the selected information:

    • hcache: Remove the hcache tables created for the SQL report.
      • adom: The ADOM name.
      • start-time: The start time (format: yyyy-mm-dd hh:mm:ss).
      • end-time: The end time (format: yyyy-mm-dd hh:mm:ss).
    • query-cache: Remove the SQL query cache for log search.
    • rebuild-db-flag: Remove the rebuild database flag. The system will exit the rebuild database state.
    • tmp-table: Remove the SQL database temporary tables.

    sql show

    Use this command to show SQL database information.

    Syntax

    diagnose sql show {db-size | hcache-size | log-filters | log-stfile <device-id> <vdom> | policy-info <adom>}

    Variable

    Description

    {db-size | hcache-size | log-filters | log-stfile <device-id> <vdom> | policy-info <adom>}

    Show the database, hcache size, log filters, or log status file:

    • db-size: Show database size.
    • hcache-size: Show hcache size.
    • log-filters: Show log view searching filters.
    • log-stfile: Show logstatus file for the specified device (for HA cluster, input the member's serial number) and VDOM.
    • policy-info: Show policy uuid and name map.

    sql status

    Use this command to show statuses of the SQL database.

    Syntax

    diagnose sql status {rebuild-adom <adom> | rebuild-db | run_sql_rpt | sqlplugind | sqlreportd}

    Variable

    Description

    {rebuild-adom <adom> | rebuild-db | run_sql_rpt | sqlplugind | sqlreportd}

    Show the status:

    • rebuild-adom <adom>: Show SQL log database rebuild status of ADOMs.
    • rebuild-db: Show SQL log database rebuild status.
    • run-sql-rpt: Show run_sql_rpt status.
    • sqlplugind: Show sqlplugind status.
    • sqlreportd: Show sqlreportd status.

    sql upload

    Use this command toupload sqlplugind messages / pgsvr logs via FTP or SFTP.

    Syntax

    diagnose sql upload {ftp | tftp} <host> <directory> <user_name> <password>

    Variable

    Description

    {ftp | tftp} <host> <directory> <user_name> <password>

    Upload sqlplugind messages / pgsvr logs with FTP or TFTP.
    Previous
    Next

    sql

    sql

    Use this command to diagnose the SQL database.

    sql config

    Use this command to show, set, or reset the SQL database configuration.

    Syntax

    diagnose sql config auto-cache-delay [set <seconds>| reset]

    diagnose sql config debug-filter [set | test] <daemon> <string>

    diagnose sql config deferred-index-timespan [set <value>]

    diagnose sql config hcache-agg-step [reset | set <integer>]

    diagnose sql config hcache-base-trim-interval [reset | set <integer>]

    diagnose sql config hcache-max-base-row [reset | set <integer>]

    diagnose sql config hcache-max-fv-row [reset | set <integer>]

    diagnose sql config hcache-max-fv-row-per-timescale [reset | set <integer>]

    diagnose sql config hcache-max-rpt-row [reset | set <integer>]

    diagnose sql config sampling-max-row [reset | set <integer>]

    diagnose sql config sampling-status [reset | set <integer>]

    diagnose sql config sampling-type [reset | set <integer>]

    Variable

    Description

    auto-cache-delay [set <seconds>| reset]

    Show, set, or reset the auto-cache delay, in seconds (default = 300).

    debug-filter {set | test} <daemon> <string>

    Show sqlplugind and sqlreportd debug filter. Enter sqlplugind, sqlreportd or both as the <daemon>. Enter the filter string.

    deferred-index-timespan [set <value>]

    View or set the time span for the deferred index (default = 10000).

    hcache-agg-step [reset | set <integer>]

    Show, set, or reset the hcache aggregation step (default = 10).

    hcache-base-trim-interval [reset | set <integer>]

    Show, set, or reset the hcache base trim interval (3600 - 2147483647, default = 172800).

    hcache-max-base-row [reset | set <integer>]

    Show, set, or reset max row number for base hcache (1000 - 1500000, default = 1000000).

    hcache-max-fv-row [reset | set <integer>]

    Show, set, or reset max row number for fortiview hcache (1000 - 400000, default = 50000).

    hcache-max-fv-row-per-timescale [reset | set <integer>]

    Show, set, or reset max row number per timescale for FortiView hcache (0 - 40000, default = 0).

    hcache-max-rpt-row [reset | set <integer>]

    Show, set, or reset max row number for report hcache (1000 - 400000, default = 18000).

    sampling-max-row [reset | set <integer>]

    Show, set, or reset max row number for sampling (1000 - 10000000, default = 1000000).

    sampling-status [reset | set <integer>]

    Show, set, or reset the sampling status. Enter 0 for disabling and 1 for enabling the sample status (0 - 1, default = 1).

    sampling-type [reset | set <integer>]

    Show, set, or reset the type of sampling (0 - 1, default = 0).

    sql debug

    Use this command to show or update the SQL debug statuses.

    Syntax

    diagnose sql debug hcache-agg dbgoff

    diagnose sql debug hcache-agg dbgon

    diagnose sql debug hcache-agg delete

    diagnose sql debug hcache-agg show [<filter>][<NUM>]

    diagnose sql debug hcache-agg upload {ftp | sftp} <host> <dir> <user name> <password>

    diagnose sql debug logview dbgoff

    diagnose sql debug logview dbgon <level value>

    diagnose sql debug logview delete

    diagnose sql debug logview show [<filter>] [<NUM>]

    diagnose sql debug logview upload {ftp | sftp} <host> <dir> <user name> <password>

    diagnose sql debug pglog show [<filter>] [<NUM>]

    diagnose sql debug pglog upload {ftp | sftp} <host> <dir> <user name> <password>

    diagnose sql debug sqlqry dbgoff

    diagnose sql debug sqlqry dbgon <level value>

    diagnose sql debug sqlqry delete

    diagnose sql debug sqlqry show [<filter>][<NUM>]

    diagnose sql debug sqlqry upload {ftp | sftp} <host> <dir> <user name> <password>

    Variable

    Description

    hcache-agg dbgoff

    Disable hcache-agg debug output.

    hcache-agg dbgon

    Enable hcache-agg debug output.

    hcache-agg delete

    Delete hcache-agg debug file.

    hcache-agg show [<filter>] [<NUM>]

    Show the last 10 lines of the hcache-agg debug file. Set filter for the debug file, and show the last NUM lines of the debug file. The filter and NUM variables are optional.

    hcache-agg upload {ftp | sftp} <host> <dir> <user name> <password>

    Upload hcache-agg debug file to FTP or SFTP server. Enter host IP address, directory, user name, and password.

    logview dbgoff

    Disable Log view debug output.

    logview dbgon <level value>

    Enable log view debug output. Set log view debug level (1-5). Default level is 1.

    logview delete

    Delete log view debug file.

    logview show [<filter>] [<NUM>]

    Show the last 10 lines of the Log view debug file. Set filter for debug file, and show last NUM lines of the debug file. The filter and NUM variables are optional.

    logview upload {ftp | sftp} <host> <dir> <user name> <password>

    Upload log view debug file to FTP or SFTP server. Enter host IP address, directory, user name, and password.

    pglog show [<filter>] [<NUM>]

    Show the last 10 lines of the Postgres log debug file. Set filter for debug file, and show last NUM lines of the debug file. The filter and NUM variables are optional.

    pglog upload {ftp | sftp} <host> <dir> <user name> <password>

    Upload Postgres log debug file to FTP or SFTP server. Enter host IP address, directory, user name, and password.

    sqlqry dbgoff

    Disable SQL query debug output.

    sqlqry dbgon <level value>

    Enable SQL query debug output. Set SQL query debug level (1-5). The default level is 1.

    Note: When the debug level is 5, the final SQL running in sqlreportd will show in the debug output as well.

    sqlqry delete

    Delete the SQL query debug file.

    sqlqry show [<filter>] [<NUM>]

    Show the last 10 lines of the SQL query debug file. Set filter for the debug file, and show the last NUM lines of the debug file. The filter and NUM variables are optional.

    sqlqry upload {ftp | sftp} <host> <dir> <user name> <password>

    Upload SQL query debug file to FTP or SFTP server. Enter host IP address, directory, user name, and password.

    sql hcache

    Use this command to show or update the SQL hcache.

    Syntax

    diagnose sql hcache add-task agg <adom> <norm-query-hash> <agg-level> <timestamp> <num-of-days>

    diagnose sql hcache add-task agg-update <adom> <hid>

    diagnose sql hcache dump-task <filter>

    diagnose sql hcache list <adom> <query-hash/tag> <filter> <detail>

    diagnose sql hcache plan <adom> <start-time> <end-time> <query-tag/norm-qry-hash/sql> <is-fortiview> <max-time-scale>

    diagnose sql hcache rebuild-both <start-time> <end-time>

    diagnose sql hcache rebuild-fortiview <start-time> <end-time>

    diagnose sql hcache rebuild-report <start-time> <end-time>

    diagnose sql hcache rebuild-status

    diagnose sql hcache show hcache <adom> <id>

    diagnose sql hcache show hcache-query <adom> <norm-qry-hash>

    diagnose sql hcache show hcache-res-tbl <adom> <res-tbl-id>

    diagnose sql hcache show time <time> <time> <time> <time>

    diagnose sql hcache status {all | <adom> | all-summary}

    Variable

    Description

    add-task agg <adom> <norm-query-hash> <agg-level> <timestamp> <num-of-days>

    Add an hcache agg task. The following input is required:

    • adom: The ADOM name.
    • norm-query-hash: The normalized query hash.
    • agg-level: The aggregation level.
    • timestamp: The timestamp (format = yyyy-mm-dd hh:mm:ss).
    • num-of-days: The number of days (1, 3, or 30).

    add-task agg-update <adom> <hid>

    Add an hcache agg update task. The following input is required:

    • adom: The ADOM name.
    • hid: The hcache agg ID.

    dump-task <filter>

    Dump hcache tasks. Enter the task filter.

    list <adom> <queryhash/tag> <filter> <detail>

    List hcaches:

    • adom: The ADOM name.

    • query-hash/tag: The hash or tag filter query, or all for all queries.

    • filter: Narrow down the hcache list search result by using a filter. The filter keywords include:

      • status: The hcache status. 0(Ready), 1(Ready-Loss), 2(In-Building), 3(Error), 4(Invalid-SQL ), 5(No-Data), 6(Not-Ready).

      • fv_flag: List FortiView/report only. 1(fortiview), 0(report).

      • sql: The SQL query match. '*' for wildcard, e.g. *select*.

      • time_start: Start of the log time. format: yyyy-mm-dd hh:MM:ss.

      • time_end: End of the log time. format: yyyy-mm-dd hh:MM:ss.

      The following shows an example of the variable <filter>:

      "status=0,1,5 sql=\"*srcip, dstip*\" time_start>=\"2020-11-01 00:00:00\" time_end<=\"2020-11-30 23:59:59\"".

      Enter "" for no filter.

    • detail: Show detailed information.

    plan <adom> <start-time> <end-time> <query-tag/norm-qry-hash/sql> <is-fortiview> <max-time-scale>

    Plan hcaches:

    • adom: The ADOM name.
    • start-time: The start time (format: yyyy-mm-dd hh:mm:ss).
    • end-time: The end time (format: yyyy-mm-dd hh:mm:ss).
    • query-tag/norm-qry-hash/sql: The query tag, normalized query hash, or sql statement.
    • is-fortiview: Enter 1 for FortiView, or 0 for report.
    • max-time-scale: Maximum timescale.

    rebuild-both <start-time> <end-time>

    Rebuild hcache for both report and FortiView. Start and end times are in the format yyyy-mm-dd hh:mm:ss.

    rebuild-fortiview <start-time> <end-time>

    Rebuild hcache for FortiView only. Start and end times are in the format yyyy-mm-dd hh:mm:ss.

    rebuild-report <start-time> <end-time>

    Rebuild hcache for report only. Start and end times are in the format yyyy-mm-dd hh:mm:ss.

    rebuild-status

    Show report hcache rebuild/check status.

    show hcache <adom> <id>

    Show hcache information. Enter the ADOM name and hcache ID.

    show hcache-query <adom> <norm-qry-hash>

    Show hcache query information. Enter the ADOM name and the normalized query hash.

    show hcache-res-tbl <adom> <res-tbl-id>

    Show hcache result table information. Enter the ADOM name and the result table ID.

    show time <time> <time> <time> <time>

    Show hcache time. Enter up to four timestamps.

    status {all | <adom> | all-summary}

    Show detailed hcache information per ADOM, for all ADOMs, or display the summary.

    sql process

    Use this command to kill or list query processes in the the SQL database.

    Syntax

    diagnose sql process kill <pid>

    diagnose sql process list [full]

    Variable

    Description

    kill <pid>

    Kill a running query.

    list [full]

    List running query processes.

    sql remove

    Use this command to remove from the SQL database.

    Syntax

    diagnose sql remove {hcache <adom> <start-time> <end-time> | query-cache | rebuild-db-flag | tmp-table}

    Variable

    Description

    {hcache <adom> <start-time> <end-time> | query-cache | rebuild-db-flag | tmp-table}

    Remove the selected information:

    • hcache: Remove the hcache tables created for the SQL report.
      • adom: The ADOM name.
      • start-time: The start time (format: yyyy-mm-dd hh:mm:ss).
      • end-time: The end time (format: yyyy-mm-dd hh:mm:ss).
    • query-cache: Remove the SQL query cache for log search.
    • rebuild-db-flag: Remove the rebuild database flag. The system will exit the rebuild database state.
    • tmp-table: Remove the SQL database temporary tables.

    sql show

    Use this command to show SQL database information.

    Syntax

    diagnose sql show {db-size | hcache-size | log-filters | log-stfile <device-id> <vdom> | policy-info <adom>}

    Variable

    Description

    {db-size | hcache-size | log-filters | log-stfile <device-id> <vdom> | policy-info <adom>}

    Show the database, hcache size, log filters, or log status file:

    • db-size: Show database size.
    • hcache-size: Show hcache size.
    • log-filters: Show log view searching filters.
    • log-stfile: Show logstatus file for the specified device (for HA cluster, input the member's serial number) and VDOM.
    • policy-info: Show policy uuid and name map.

    sql status

    Use this command to show statuses of the SQL database.

    Syntax

    diagnose sql status {rebuild-adom <adom> | rebuild-db | run_sql_rpt | sqlplugind | sqlreportd}

    Variable

    Description

    {rebuild-adom <adom> | rebuild-db | run_sql_rpt | sqlplugind | sqlreportd}

    Show the status:

    • rebuild-adom <adom>: Show SQL log database rebuild status of ADOMs.
    • rebuild-db: Show SQL log database rebuild status.
    • run-sql-rpt: Show run_sql_rpt status.
    • sqlplugind: Show sqlplugind status.
    • sqlreportd: Show sqlreportd status.

    sql upload

    Use this command toupload sqlplugind messages / pgsvr logs via FTP or SFTP.

    Syntax

    diagnose sql upload {ftp | tftp} <host> <directory> <user_name> <password>

    Variable

    Description

    {ftp | tftp} <host> <directory> <user_name> <password>

    Upload sqlplugind messages / pgsvr logs with FTP or TFTP.
    Previous
    Next