Chapter 9 High Availability for FortiOS 5.0 : Operating a cluster : Clusters and logging : Viewing and managing log messages for individual cluster units : About HA event log messages
  
About HA event log messages
HA event log messages always include the host name and serial number of the cluster unit that recorded the message. HA event log messages also include the HA state of the unit and also indicate when a cluster unit switches (or moves) from one HA state to another. Cluster units can operate in the HA states listed in Table 56:
Table 56: HA states
Hello
A FortiGate unit configured for HA operation has started up and is looking for other FortiGate units with which to form a cluster.
Work
In an active-passive cluster a cluster unit is operating as the primary unit. In an active-active cluster unit is operating as the primary unit or a subordinate unit.
Standby
In an active-passive cluster the cluster unit is operating as a subordinate unit.
HA log Event log messages also indicate the virtual cluster that the cluster unit is operating in as well as the member number of the unit in the cluster. If virtual domains are not enabled, all clusters unit are always operating in virtual cluster 1. If virtual domains are enabled, a cluster unit may be operating in virtual cluster 1 or virtual cluster 2. The member number indicates the position of the cluster unit in the cluster members list. Member 0 is the primary unit. Member 1 is the first subordinate unit, member 2 is the second subordinate unit, and so on.