Critical System Log message "/dev/sdd is failing now - Reallocated_Sector_Ct"

Critical System Log message "/dev/sdd is failing now - Reallocated_Sector_Ct"

1804
Created On 05/03/25 08:17 AM - Last Modified 07/08/25 03:23 AM


Symptom


  • System log (show log system) displays drive fail messages as below.
12:46:36 critical general general 0 Disk Log2: /dev/sdd is failing now - Reallocated_Sector_Ct
12:36:36 2025/03/16 12:36:36 critical general general 0 Disk Log2: /dev/sdd is failing now - Reallocated_Sector_Ct
  • SMART outputs indicate that the self-assessment test results failed along with the attribute
> debug system disk-smart-info disk-4
=== START OF INFORMATION SECTION ===
Device Model: ST2000NX0253
Serial Number: W4XXXXX
LU WWN Device Id: 5 000c50 0c775d068
Firmware Version: SN05
User Capacity: 2,000,398,934,016 bytes [2.00 TB]
=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: FAILED! <<<<<<<<<<
Drive failure expected in less than 24 hours. SAVE ALL DATA.
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x000f 065 064 044 Pre-fail Always - 163572635
3 Spin_Up_Time 0x0003 092 092 000 Pre-fail Always - 0
4 Start_Stop_Count 0x0032 100 100 020 Old_age Always - 28
5 Reallocated_Sector_Ct 0x0033 001 001 010 Pre-fail Always FAILING_NOW 65528


Environment


  • Palo Alto Networks Firewall
  • Supported PAN-OS
  • Log Drives installed


Cause


Faulty Log2 disk on the firewall, causing the disk to fail due to Reallocated_Sector_Ct errors.



Resolution


  1. Replace the faulty disk with a new one.
  2. Generally there are 2 System Drives and 2 Log Drives. The mapping is as follows
Sys1Disk1
Sys2Disk2
Log1Disk3
Log2Disk4

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000fxUlKAI&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail