Forwarding all logs to a FAZ that is unavailable

3 replies
28524 views

If I have disk logging disabled and I'm forwarding all logs to a FAZ that is unavailable, what is the negative effect on a FortiGate that has 100s or 1000s of logs building up in the queue? Will this potentially cause memory issues?

Thanks!

brazz_FTNTAnswer

Staff

Hello,

FGT has some limited buffer size to queue the logs;however, eventually, the older logs will be dropped.

Thanks

brazz_FTNTAnswer

Staff

Hello,

FGT has some limited buffer size to queue the logs;however, eventually, the older logs will be dropped.

Thanks

adeboerAuthor

New Member

Appreciate the reply, thanks!

emnoc

New Member

This is why it's critical to have two log targets. If your using log memory you can controlling the setting but typically by default it's to overwrite. Don't worry about the fortigate failing due to lost connection or FAZ not available.

Ken Felix

Sign up

Login with SSO

Login to the community

Login with SSO