API proxy daemon test usage:

• 1: show PID
• 2: show statistics and state
• 20: fsa tracer log request
• 21: fsa tracer log request
• 99: restart daemon

Archd daemon test usage:

• 1: usage
• 2: display content subdir info file
• 3: force scan to archive ips files
• 4: force preen content files
• 99: restart daemon

Clusterd daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)
• 2: Thread pool status
• 3: Log Cluster core
• 4: Devices cache module
• 5: Logging Topology module
• 6: Avatar uploading module
• 7: Meta-CSF uploading module
• 8: Meta-InterfaceRole module
• 9: Tunnel module
• 10: oftpd file fwd module
• 11: Service module
• 97: HA module
• 98: Monitor status
• 99: Restart clusterd
• 100: Restart clusterd and clusterd-monitor
• 102: Various tests
• 103: generate core dump (on or off) when cluster.monitor kills cluster.main

Security Fabric daemon test usage.

• 1: Show stats

• 2: Show plugin status

• 4: Start csfd diagnostic stat collection

• 5: Stop csfd diagnostic stat collection

• 6: Toggle diagnostic collection type

• 7: Print collected diagnostic stats

• 10: Show query cache status

• 30: Show worker processes information

• 31: Kill/Recreate worker processes gracefully

• 32: Kill/Recreate worker processes by force (May loose tasks)

• 33: Run a test job

• 40: Show Upstream Path

• 41: Show list of pending downstream authorizations

• 42: Show list of authorized downstream nodes

• 43: Show auth mode

• 44: Show upstream mgmt info

• 50: Show key info

• 63: Show config versions

• 80: Send test message to upstream

• 81: Send test message to first downstream

• 82: List unconfirmed outgoing messages

• 83: List partial incoming messages

• 84: List unconfirmed confirmations with extra data

• 85: Dump timeout information

• 86: Flush all outgoing messages

• 90: Dump Table Counts

• 91: Print Known Processes

• 92: Send test message to root's cli-test-listener process

• 100: Show cached downstream list

• 110: Dump file meory usage info

• 999: Restart

Execmd daemon test usage:

• 1: show PID
• 2: show statistics and state
• 3: reset statistics and state
• 4: show statistics of cmd tool
• 5: reset statistics of cmd tool
• 99: restart daemon

Fabricsyncd daemon test usage.

Fazalertd daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)

• 2: show statistics and state

• 4: show worker thread info

• 5: show commit info

• 99: restart daemon

• 200: diag for event manager

• 201: diag for alert parser

• 203: diag for event engine debug settings

• 204: diag for alert commit statistics

• 205: diag for event engine

• 206: diag for event engine scheduler

• 207: diag for event engine rocksdb stats

• 500: diag for event engine rocks db

Fazcfg daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)

• 2: show statistics

• 3: show merged ca info

• 4: show runtime logs. 'help' to show usage

• 5: device offline event logs info and debug options

• 6: system general check

• 7: timezone diag info

• 40: DVM cache diag info

• 41: CSF diag info

• 42: ncmdb diag info

• 43: reload csf info in devtable

• 44: show log device group stats

• 45: check log device group

• 46: metadata table diag info [sub-module]

• 48: test update link prefixes file

• 49: test update webfilter categories description file

• 50: test get app icon

• 51: test update app logo files

• 52: dvm call stats

• 53: dvm call stats clear

• 54: check ips/app meta-data update

• 55: log disk readahead get

• 56: log disk readahead toggle

• 57: maintain redis storage <check|fix> [redis-port] [filepath]

• 59: test update faz license

• 60: test fortigate restful api

• 65: log aggregation server stats

• 66: log aggregation server state toggle (debug only)

• 67: test redis security connect [port] [key] [value]

• 69: show device SN change events

• 70: show installed meta-data status

• 82: list avatar meta-data

• 83: rebuild avatar meta-data table

• 84: rebuild ips meta-data table

• 85: rebuild app meta-data table

• 86: rebuild FortiClient Vulneribility meta-data table

• 88: update ffdb meta-data

• 90: use built-in TIDB package and disable updating it

• 91: enable updating TIDB package

• 92: disable updating TIDB package

• 93: switch on/off adom default report schedule

• 94: switch on/off report schedule by name

• 97: set 'force_restore_data' flag for clickhouse start

• 99: restart daemon

Fazmaild daemon test usage:

• 1: show PID and daemon status
• 2: show runtime status
• 90: pause sending mail
• 91: resume sending mail
• 99: restart fazmaild daemon

Faznotify daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)
• 2: show faznotify statistics [clear]
• 3: show faznotifyspecific connector statistics <adom> <webhook-name> [clear]
• 10: send a faznotify <adom> <id> <send-data>
• 20: show active channel
• 29: delete active channel <adom> <id>
• 30: pause active channel <seconds>
• 40: test webhook server <adom> <webhook-name>
• 41: test oauth2 token server <adom> <webhook-name>
• 99: restart

Fazsvcd daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)
• 2: show daemon stats and status
• 3: list async search threads
• 4: dump async search slot info
• 5: show cache builder stats
• 6: dump cache builder playlist
• 7: dump log search filters
• 10: show database log stats aggregated per day
• 11: show received log stats aggregated per day
• 20: show avatar request stats
• 50: enable or disable cache builder
• 51: enable or disable auto custom index
• 52: enable or disable skip-index usage
• 53: enable or disable agg group skip-index usage
• 54: enable or disable search cache usage
• 55: show current search caches
• 57: Fazbroker stats
• 58: Reset Fazbroker stats
• 60: rawlog idx cache test
• 61: logbrowse cache stats
• 62: FortiView Session Stats
• 70: show stats for device vdom cache
• 71: show stats for remote fortiview and reports
• 72: show filterable and sortable fields for fortiview. <v3.0 view name>
• 73: show stats for the address object uuid2name cache
• 74: clear the address object uuid2name cache
• 75: data masking test: <passwd> <plaint test> <1|0 (high secure)> [do_unmasking]
• 76: fazsvcd fabric service diagnostics
• 77: Fabric of FAZ api aggregation stats
• 78: Fabric of FAZ session table list
• 79: Fabric of FAZ logsearch session stats [reqid]
• 99: restart daemon
• 100: log FAZ debugs
• 101: Close FAZ debug log
• 200: gui api test
• 201: diag for jsonrpc ..

Fazwatchd daemon test usage:

• 1: show process summary and report stats
• 2: show playbook stats
• 4: show nac asset stats
• 5: show playbook task log
• 6: show ha command execution stats
• 7: show casb metadata stats
• 8: show ems metadata stats
• 9: show pgsvr.log monitor stats
• 99: restart daemon

Filefwd daemon test usage:

• 1: show daemon PID
• 2: show daemon stats
• 3: show threads stats
• 99: restart daemon

Fileparsed daemon test usage:

• 1: show PID
• 2: show statistics and state
• 3: show devtable local cache status
• 4: reload devtable local cache.
• 11: show FortiGate interface cache status
• 12: show FortiGate interface parsers status
• 13: show FortiGate interface archived files disk usage
• 14: show FortiGate interface archived files retention days
• 15: show FortiGate interface info
• 16: show total number of interfaces trimmed from database
• 17: show FortiGate policy files process status
• 18: show total number of policy records in database
• 98: rebuild FortiGate interface SQL tables
• 99: restart daemon

Forticldd Diag test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)
• 2: switch on/off debug messages
• 3: dump Contract Controller status
• 4: Update contract controller
• 5: Show fgfm status
• 6: Recover fgfm
• 99: restart forticldd

Fortilogd Diag test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)
• 2: dump message status
• 3: logstat status
• 4: client devices status
• 5: print log received
• 6: switch on/off debug messages
• 7: log forwarding prep status
• 8: show logUID info
• 9: device log cache reloading status
• 10: dz_client cache status
• 11: file stats
• 12: stop/restart receiving logs
• 14: show cached adom lograte status
• 15: show cached adom log volume status
• 16: show appevent logs receiving info
• 17: show logging rate of the system and per-device
• 18: show per-ADOM log rate and rate limit
• 90: show or set fortilogd working status
• 95: show runtime logs. option format: pid=0:current,-1:all,PID duration=DURA filter=STR
• 98: memory check
• 99: restart fortilogd

Fwdplugind daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)

• 2: show stats

• 3: show fwd-plugin status

• 4: show Fluentd stats

• 5: show Fluentd config

• 88: restart Fluentd with new config

• 99: restart daemon

• 200: dia for configuration:

  • reload: reload configuration

  • logfwd-remote: show fluentd configuration by logfwd remote name

  • temp-config: show temporary fluentd configuration file when creating configuraion file fail.

  • auth-limit: show plugins detail about google auth-limit control.

  • conflict-limit: show plugins detail about conflict control.

• 201: dia for debug:

  • log {enable | disable}: enable/disable Fluentd from generating logs in files.

  • monitor {enable | disable}: enable/disable Fluentd monitoring.

  • restart: restart Fluentd immediately.

  • clean_restart: remove all Fluentd related files and restart fwdplugind.

Logfile daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)
• 2: show statistics and state
• 4: show ADOM statistics
• 5: show device statistics
• 6: show auto-del statistics
• 7: show log file disk usage
• 8: update log file disk usage
• 9: show inode usage
• 10: enable or disable debug filterof device and vdom
• 11: du cache diag commands
• 12: force to checkthe oldest log litime when trim log files.
• 90: reset statistics and state
• 91: force to preen content files info
• 99: restart daemon

Logfwd daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ..)
• 2: Dump thread-pool status
• 3: Dump log-forward configurations
• 4: Dump log-forwarding status
• 5: Overall and converter stats
• 6: Dump HA CID info
• 7: show runtime logs. option format: pid=0:current,-1:all,PID duration=DURA filter=STR
• 8: show cfile list status [all: for all cfiles]
• 9: show max durationof loss in memory mode, 120 seconds default, 0 to disable memory mode
• 10: Force logfwd to run in disk mode [1:enable, 0:disable]
• 97: memory check
• 98: Reset log-forwarding stats
• 99: Restart logfwd

Log-fetch daemon test usage:

• 1: show PID
• 2: show states
• 3: show running sessions
• 99: restart the daemon

Miglogd daemon test usage:

• 1: show PID
• 2: dump memory pool
• 99: restart daemon

Oftpd daemon test usage:

• 1: show PID
• 2: show statistics and state
• 3: show connected device name and IP
• 4: show detailed session state
• 5: show oftp request statistics
• 6: show cmdb device cache
• 7: show logfwd thread stats
• 8: show tasklist statistics
• 9: show unreg dev cache
• 10: log cluster bridge stats
• 11: show helper threads stats
• 12: show HA group cache
• 13: show file fwd stats
• 14: show fct software inventory cache
• 15: show fgt interface stats
• 16: show fos-auto device dump. [dev] to dump device list
• 17: show device logging rate & rate-limit. [enable] to force tracking log-rate or [disable] to track only rate-limited devices. [config] to show config
• 18: show fgt policy info, [dev] to dump device list
• 21: dump oftp-restapi-sched stats
• 22: dump oftp-restapi-sched status
• 23: dump oftp csf member status
• 30: dump csf groups data in all adoms in json string
• 31: show csf groups update stats
• 32: reschedule all restapi task for designated devid
• 40: test loading a CA cert from local path
• 50: display logtypes for all devid
• 60: display login requests stats
• 80: set region
• 90: reload un-reg device tree
• 91: delete designated csf group
• 92: reload reg dev cache
• 95: debug output
• 99: restart daemon

Sqlrptcache daemon test usage:

• 1: show PID
• 2: show statistics and state
• 3: reset statistics and state
• 4: list adoms
• 6: list schedules
• 55: re-check an adom
• 99: restart daemon
• 910: enable rptchkd
• 911: disable rptchkd

Rptschedler daemon test usage:

• 1: show PID
• 2: show statistics and state
• 3: reset statistics and state
• 99: restart daemon

Scansched daemon test usage:

• 1: show PID
• 2: show statistics and state
• 3: reset statistics and state
• 11: show ioc-rescan task status
• 99: restart daemon

SDN proxy daemon test usage.

Siemagentd daemon test usage:

• 1: show PID

• 2: show daemon statistics

• 3: show workers log stats

• 4: show workers status stats

• 5: show workers pools status

• 6: siem workers reload config

• 7: siem workers engine info dump

• 20: show the siem stream storage info

• 21: show the latest siem stream submitted in redis

• 99: restart daemon

• 200: diag for log based alert (event mgmt)

• 201: diag for siemagentd configuration

Siemdbd daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)

• 2: show statistics and state

• 3: show running processes

• 4: show writers info

• 5: show splitter info

• 6: show Adom database info

• 7: show trimmer info

• 8: show the shared Materialized View disk usage info

• 9: set/reset max memory usage ratio

• 10: add or drop skip indices on SIEM table

• 11: cleanup CH tmp_merge dir

• 41: show writer 1 info

• 42: show writer 2 info

• 43: show writer 3 info

• 97: clear redis stream

• 99: restart daemon

SNMP daemon test usage:

• 1: display daemon pid
• 2: display snmp statistics
• 3: clear snmp statistics
• 4: generate test trap (cpu high)
• 5: generate test traps (log alert, rate, data rate)
• 6: generate test traps (licensed gb/day, device quota)
• 99: restart daemon

SqlLog daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)

• 2: show statistics and state

• 3: show worker init state

• 4: show worker thread info

• 5: show log device scan info, optionally filter by <devid>

• 7: show ADOM device list by <adom-name>

• 8: show logUID info

• 9: show ADOM scan sync info, optionally filter by <adom>

• 10: show FortiClient dev to sql-ID (sID) map

• 11: show devtable cache info

• 12: show intfrole cache info

• 41: show worker 1 info

• 51: show worker 1 registered log devices

• 61: show worker 1 open log file cache

• 70: show sql database building progress

• 71: show the progress of upgrading log files into per-vdom storage

• 72: run the upgrading log files into per-vdom storage

• 80: show daemon status flags

• 81: show debug zone devices status

• 82: show all adoms with member devices or filer by <adom-name>

• 83: show all registered logdevs

• 84: show all unreg logdevs

• 85: show fazid map stats

• 91: diag worker devvd loadbalance

• 95: request to rebuild SQL database for local event logs

• 96: resend all pending batch files to sqlplugind

• 97: rebuilding warm restart

• 98: set worker assignment to policy 'round-robin' or 'adom-affinity', daemon will restart on policy change.

• 99: restart daemon

• 200: diag for log based alert (event mgmt) ..

• 201: diag for UTM correlation cache ..

• 202: diag for fgt-fct corelation ..

• 203: diag for logstat ..

• 204: diag for IoC ..

• 205: diag for endpoint and enduser ..

• 206: diag for ueba ..

• 207: diag for FSA scan session ..

• 208: diag for audit report event process ..

• 209: diag for shadow it info ..

• 210: diag for fgt epeu info ..

• 221: estimated browsing time stats

• 222: fsa devmap cache info

• 224: fgt lograte cache info

• 225: dump enum field error cache

• 226: reset enum field error cache

• 227: dump tz field error cache

• 228: reset tz field error cache

• 229: diag archivers compression algorithm

• 230: diag for ems enrich ..

Sqlplugind daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)

• 2: show daemon stats

• 3: show SIEM table stats

• 4: show table compressor stats

• 5: show table compressor Adom stats

• 6: show table slow upgrade info

• 7: show faz fabric meta table stats

• 91: scan hcache query templates and clean up unused

• 92: scan metadata and update sql

• 98: scan and clean zombie cstore files

• 99: restart daemon

Sqlreportd daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)
• 2: show daemon stats
• 3: show restorable table schema
• 4: show restorable table status
• 5: delete SQL restorable table files in collector mode <ADOM>
• 99: restart daemon

Sqlrptcache daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)

• 2: show statistics and state

• 3: reset statistics and state

• 5: dump auto-cache charts

• 6: show auto-cache SQL grouping

• 7: upload auto-cache SQL grouping

• 8: show auto-cache SQL recommendation

• 9: upload auto-cache SQL recommendation

• 99: restart daemon

Syncsched daemon test usage:

• 1: Daemon info (PID, meminfo, backtrace ...)
• 2: show report nodes states
• 3: show report syncing state
• 4: show ha sync peers
• 5: reset ha sync queue
• 6: show ha elog sync
• 10: sync reports with peer
• 11: fsync stat
• 12: fsync reload
• 13: trim sync dir stat
• 99: restart daemon

Test the connection to the FortiAnalyzer.

Test the connection to the mail server. Enter the email account which this test email will be sent from and to. Optionally, enter the ADOM name.

Flush all policy check sessions.

Flush all search sessions.

SFTP server IP address.

SFTP server username.

SFTP server password.