Skip to main content
jdvorak
Staff
jdvorak
Staff
April 5, 2017

Technical Tip: Hard disk utilization by the FortiGate

  • April 5, 2017
  • 0 replies
  • 58073 views

Description

 

This article explains how HD usage is divided on FortiGate.
 
Scope
 
FortiGate.


Solution

 

The total HD usage can be found by running the command 'diagnose sys logdisk usage'.
 
diagnose sys logdisk usage
Total HD usage: 29540MB/29540MB
Total HD logging space: 11250MB
HD logging space usage for vdom "1": 5875MB/10240MB
HD logging space usage for vdom "2": 7MB/256MB
HD logging space usage for vdom "3": 7MB/256MB
HD logging space usage for vdom "root": 10MB/256MB
Total HD Usage space is 29540MB
 
The disk space is divided into two parts:
  • log-disk-quota.
  • wanopt storage.

The current values can be displayed by running the following commands:
 
show system resource-limits
config system resource-limits
set log-disk-quota 15000
end
 
config wanopt storage
edit Internal
get
name : Internal
size : 512
webcache-storage-percentage: 0
webcache-storage-size: 0
wan-optimization-cache-storage-size: 512
 
In this case, the configured disk quota is 15,000MB. 
 
However, the total HD logging space is 11 250MB. This is because FortiGate is using by design only 75% of the disk.
 
75% of 15 000MB = 11 250MB (Total HD logging space: 11 250MB)

The rest of the disk space is ready to be used either in more disk quota or in wanopt storage, in this case, up to 14 540MB.
 
config wanopt storage
edit Internal
set size
<integer> maximum total size of files within the storage range from 512 to 14540(MB)
 
Disk quota 15 000MB + Max WanOpt Storage 14 540MB =  Total HD Usage space 29 540MB.

A maximum disk log quota of 29 028MB can be configured which will leave only 512MB for WanOpt (29 028 + 512 = 29 540).
 
config system resource-limits
set log-disk-quota
<integer> disk quota within range 11008-29028 MB

 

Note:

During troubleshooting of high CPU utilization, it is recommended to check who accesses the HDD and how often.
On v7.4.2 GA , a new command has been introduced that shows each file access attempt's PID, process name, and accessed file path:

 

diagnose sys iotop

<interval> Print interval in seconds (default to 5). Accept value from 5 to 3600.


diagnose sys iotop 5

PID           #O       #R       #W       #C        PROCESS       FILE
2012          1           1          0          1         forticron           /var/run/dhcpd.pid
2025          1           0          1          1         reportd            /var/log/log/root/report/60/1703839800.rpt

 

PID           #O          #R     #W        #C        PROCESS      FILE
2012          1           1          0           1         forticron         /var/run/dnsproxy.pid

 

PID          #O         #R       #W         #C        PROCESS FILE
2012          1            1          0           1         forticron         /var/run/dnsproxy.pid

PID          #O         #R        #W        #C         PROCESS FILE
2012           1          1           0           1          forticron        /var/run/dhcpd.pid

 

Related articles:

Troubleshooting Tip: Disk Space utilization over 90% on the FortiGate

Troubleshooting Tip: How to clear short of flash space in FortiGate Disk partition

 

    Terms & ConditionsAccessibility statement