Giant spike in logs being sent to FM

Forum|Forum|10 years ago
December 15, 2015
3 replies
4799 views

Hey All,

A couple days ago we got a massive spike of logs from live devices in the field and the logs were sent back to FM. I attached a screenshot of the jump and I was wondering if there is a way to pinpoint which device/devices caused this?

Thanks,

Alan

logs.jpg

scao_FTNT

Staff

pls try "dia fortilogd msgrate-device"

Thanks

Simon

adeboerAuthor

New Member

That helped a lot. Thank you!

Pradhumna_FTNT

Staff

Hi Alan,

You can use this command,

diagnose fortilogd msgrate-device

diagnose fortilogd msgrate-type

You can also check if the severity in the log filter settings was changed.

config log fortianalyzer filter

set severity <information> //ideal configuration

end

Regards, Pradhumna Chandra

Sign up

Login with SSO

Login to the community

Login with SSO