Skip to main content
adeboer
adeboer
New Member
January 17, 2020
Solved

Forwarding all logs to a FAZ that is unavailable

  • January 17, 2020
  • 1 reply
  • 28483 views

If I have disk logging disabled and I'm forwarding all logs to a FAZ that is unavailable, what is the negative effect on a FortiGate that has 100s or 1000s of logs building up in the queue? Will this potentially cause memory issues?

 

Thanks!

    Best answer by brazz_FTNT

    Hello,

     

    FGT has some limited buffer size to queue the logs;however, eventually, the older logs will be dropped. 

    Thanks

     

     

    1 reply

    brazz_FTNT
    Staff
    brazz_FTNTAnswer
    Staff
    January 17, 2020

    Hello,

     

    FGT has some limited buffer size to queue the logs;however, eventually, the older logs will be dropped. 

    Thanks

     

     

    adeboer
    adeboerAuthor
    New Member
    January 17, 2020

    Appreciate the reply, thanks!

    emnoc
    emnoc
    New Member
    January 17, 2020

    This is why it's critical to have two log targets. If your using log memory you can controlling the setting but typically by default it's to overwrite. Don't worry about the fortigate failing due to lost connection or FAZ not available.

     

    Ken Felix

    Terms & ConditionsAccessibility statement