Skip to main content
tonifan
New Member
September 6, 2018
Question

Fortianalyzer exceeds the quota of defined archive logs

  • September 6, 2018
  • 5 replies
  • 7930 views

Hello,

in my FAZ an ADOM exceeds the quota of defined archive logs without deleting the oldest ones. How can I fix it? Maybe a Rebuild of the data-base? Or trying to increase the value of Keep Logs for Archive compared to the days storaged? thankyou

    5 replies

    brazz_FTNT
    Staff
    Staff
    September 13, 2018

    Hello, 

     

    What is the FAZ version ?

    how many devices are connected to FAZ ? and actively sending logs to FAZ ?

    Thanks 

    tonifan
    tonifanAuthor
    New Member
    September 14, 2018

    v6.0.2-build0205 180813 (GA)

    30 devices connected, and actively sending logs.

    I did a rebuild of the global data-base and I've changed the Archive Config Days.

    now after 10 days I get this:

    199/191(104%)

    this means that the log collection exceded the quota

     

    maybe I have to open a ticket....

    brazz_FTNT
    Staff
    Staff
    September 14, 2018

    Hello, 

     

     

    Can you also please  check the log file rolling size? BY default is set to 200M.

     

    It would be the best if you open up a case with Fortinet Support.

     

     

    Thanks 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!