Critical System Log message "/dev/sdd is failing now - Reallocated_Sector_Ct"
1804
Created On 05/03/25 08:17 AM - Last Modified 07/08/25 03:23 AM
Symptom
- System log (show log system) displays drive fail messages as below.
12:46:36 critical general general 0 Disk Log2: /dev/sdd is failing now - Reallocated_Sector_Ct
12:36:36 2025/03/16 12:36:36 critical general general 0 Disk Log2: /dev/sdd is failing now - Reallocated_Sector_Ct
- SMART outputs indicate that the self-assessment test results failed along with the attribute
> debug system disk-smart-info disk-4
=== START OF INFORMATION SECTION ===
Device Model: ST2000NX0253
Serial Number: W4XXXXX
LU WWN Device Id: 5 000c50 0c775d068
Firmware Version: SN05
User Capacity: 2,000,398,934,016 bytes [2.00 TB]
=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: FAILED! <<<<<<<<<<
Drive failure expected in less than 24 hours. SAVE ALL DATA.
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x000f 065 064 044 Pre-fail Always - 163572635
3 Spin_Up_Time 0x0003 092 092 000 Pre-fail Always - 0
4 Start_Stop_Count 0x0032 100 100 020 Old_age Always - 28
5 Reallocated_Sector_Ct 0x0033 001 001 010 Pre-fail Always FAILING_NOW 65528
Environment
- Palo Alto Networks Firewall
- Supported PAN-OS
- Log Drives installed
Cause
Faulty Log2 disk on the firewall, causing the disk to fail due to Reallocated_Sector_Ct errors.
Resolution
- Replace the faulty disk with a new one.
- Generally there are 2 System Drives and 2 Log Drives. The mapping is as follows
| Sys1 | Disk1 |
| Sys2 | Disk2 |
| Log1 | Disk3 |
| Log2 | Disk4 |