Troubleshooting Tip: Forward traffic log slow loading when log resolve hostnames enabled

Description

This article describes the issue of slow forward traffic log loading with resolve hostnames enabled.

Scope

FortiGate version 7.6.5.

Solution

Forward traffic log takes a significant time to load after firmware upgrade to versions 7.6.5/7.6.6.

1. Check if dnsproxy daemon is having high CPU usage using the command:
   
   

diagnose sys top 2 30

2. Check the log setting preference for resolving the hostname and resolving unknown application configuration (Log & Report -> Log Setting):
   
   

Workaround:

Disable resolve hostnames and resolve unknown applications.

For dnsproxy daemon high CPU issue, track under bug ID 1254463.