Skip to main content
AlexFeren
New Member
October 14, 2015
Solved

Clarification of Log Message Rate and Log Rate as shown by diagnose fortilogd

  • October 14, 2015
  • 1 reply
  • 9175 views

I understand 'Log Rate' to be SYSLOG messages received from devices, but what is a 'Log Message' as shown by 'diagnose fortilogd msgrate' command?

 

Also, is there a CLI command to show

[ul]
  • Insert Lag Time?
  • Insert Rate?[/ul]
    • Best answer by scao_FTNT

      when FGT send log to FAZ, multiple logs may compress into 1 message for better performance, so you will see 2 rate, one is for message and one is for uncompressed log

       

      for log insert rate, pls try below

       

      diag deb en

      diag sql status sqlplugind PID: 428, now: 1444868152, uptime: 26308 Thread registered: 2 Log insert speed: logs/5sec: 115.0, logs/60sec: 215.7  Overall: 199.8 (5241880)

      ...

       

      there is no CLI for lag time since it might be different for different ADOM, different log table etc and I may still suggest you to monitor on GUI system settings lag time widget (or in log view check for each device historical log)

       

      Thanks

       

      Simon

      1 reply

      scao_FTNT
      Staff
      scao_FTNTAnswer
      Staff
      October 15, 2015

      when FGT send log to FAZ, multiple logs may compress into 1 message for better performance, so you will see 2 rate, one is for message and one is for uncompressed log

       

      for log insert rate, pls try below

       

      diag deb en

      diag sql status sqlplugind PID: 428, now: 1444868152, uptime: 26308 Thread registered: 2 Log insert speed: logs/5sec: 115.0, logs/60sec: 215.7  Overall: 199.8 (5241880)

      ...

       

      there is no CLI for lag time since it might be different for different ADOM, different log table etc and I may still suggest you to monitor on GUI system settings lag time widget (or in log view check for each device historical log)

       

      Thanks

       

      Simon

      AlexFeren
      AlexFerenAuthor
      New Member
      October 15, 2015

      Thank you.

       

      > when FGT send log to FAZ, multiple logs may compress into 1 message for better performance, so you will see 2 rate, one is for message and one is for uncompressed log

       

      (If 'Log Messages' encapsulate variable number of Logs then) wouldn't it have been more useful to show finer-grained Log statistics instead of Log Message statistics (as 'diagnose fortilogd msgrate-type' and 'diagnose fortilogd msgrate-device' do)?