DEVICE WAS NOT GRACEFULLY SHUTDOWN. DATA MAY HAVE BEEN LOST
X Family Firewall - Event logs no longer displayed
Symptoms:
- Event logs no longer displayed
- “No records were found” error
- Event logs showing empty logs while entries count is not null
Facts:
- X Family
- X5
- X506
Causes: X5 or X506 firewall should not be stopped or rebooted by removing the power plug, a graceful shutdown should be done instead via the CLI command HALT. Failure to do follow this recommendation may result in permanent corruption of the filesystem and/or Firewall files/logs. After an improper power cycle of an X series Firewall we have seen the log files being corrupted and no longer displayed.
Fixes: Example of the log issue:
The show log summary shows entries (in this example 1866 entries) and yet when the customer tries to show the system logs, the logs are not displayed.
X506# sh log summ Log Entries First entry Last entry --- ------- ----------- ---------- Alert 130 1 130 Audit 2378 1 2378 Block 22124 1 22124 System 1866 482 2347 X506# sh log system No records were found. X506#
Reset the even logs via the Web interface Reset button. There is no way to recover those corrupted logs files.
- Product(s): X Family
- Sub Product(s): X5, X506
— David Gonzalez 2021/04/08 10:54