DEVICE WAS NOT GRACEFULLY SHUTDOWN. DATA MAY HAVE BEEN LOST

Symptoms:

• Event logs no longer displayed
• “No records were found” error
• Event logs showing empty logs while entries count is not null

Facts:

• X Family
• X5
• X506

Causes: X5 or X506 firewall should not be stopped or rebooted by removing the power plug, a graceful shutdown should be done instead via the CLI command HALT. Failure to do follow this recommendation may result in permanent corruption of the filesystem and/or Firewall files/logs. After an improper power cycle of an X series Firewall we have seen the log files being corrupted and no longer displayed.

Fixes: Example of the log issue:

The show log summary shows entries (in this example 1866 entries) and yet when the customer tries to show the system logs, the logs are not displayed.

X506# sh log summ 
Log      Entries      First entry      Last entry 
---      -------      -----------      ---------- 
Alert        130                1             130 
Audit       2378                1            2378 
Block      22124                1           22124 
System      1866              482            2347 

X506# sh log system 
No records were found. 
X506# 

Reset the even logs via the Web interface Reset button. There is no way to recover those corrupted logs files.

• Product(s): X Family
• Sub Product(s): X5, X506

— David Gonzalez 2021/04/08 10:54