Skip to main content
tonifan
tonifan
New Member
September 6, 2018
Question

Fortianalyzer exceeds the quota of defined archive logs

  • September 6, 2018
  • 1 reply
  • 7909 views

Hello,

in my FAZ an ADOM exceeds the quota of defined archive logs without deleting the oldest ones. How can I fix it? Maybe a Rebuild of the data-base? Or trying to increase the value of Keep Logs for Archive compared to the days storaged? thankyou

    1 reply

    brazz_FTNT
    Staff
    brazz_FTNT
    Staff
    September 13, 2018

    Hello, 

     

    What is the FAZ version ?

    how many devices are connected to FAZ ? and actively sending logs to FAZ ?

    Thanks 

    tonifan
    tonifanAuthor
    New Member
    September 14, 2018

    v6.0.2-build0205 180813 (GA)

    30 devices connected, and actively sending logs.

    I did a rebuild of the global data-base and I've changed the Archive Config Days.

    now after 10 days I get this:

    199/191(104%)

    this means that the log collection exceded the quota

     

    maybe I have to open a ticket....

    brazz_FTNT
    Staff
    brazz_FTNT
    Staff
    September 14, 2018

    Hello, 

     

     

    Can you also please  check the log file rolling size? BY default is set to 200M.

     

    It would be the best if you open up a case with Fortinet Support.

     

     

    Thanks 

    Terms & ConditionsAccessibility statement