How to retrieve current "Log Insert Lag Time" value

Forum|Forum|29 days ago
June 22, 2026
1 reply
61 views

Sporadically our Fortianalyzer (7.4.9) will stop sending logs to our main syslog log collector (Is still collecting from other systems). The “Log Insert Lag Time” will get up to 18 or so hours and keep climbing, when it should be like 20-30 seconds. When the analyzer is rebooted, logs start to flow and the time slowly starts to normal, and everything is ok.

I’ve been trying to get that value via a command line, or SNMP to feed our PRTG system to monitor when it happens before it gets out of control. But, it seems to be allusive. Maybe I’m missing something? Perhaps there is another tell sign that I can look at? Or is it a feature request?

Thanks!

FortiAnalyzer

Best answer by sjoshi

You can obtain FAZ SNMP OID value from the support portal

Trap are has below:

fmTrapLogRateThreshold (.1.3.6.1.4.1.12356.103.0.0.404)
Indicates that the incoming log rate has exceeded the threshold

fmSysLogRate (1.3.6.1.4.1.12356.103.2.1.9)
Log receiving rate in number of logs per second.

sjoshi

Staff

hi @Rick2026

are you looking for OID value regarding the status of Log Insert Lag Time for your SNMP manager?

Thanks, Salon

R

Rick2026Author

New Member

Thanks for the reply! That would probably work out. I’m sure PRTG could grab it if it was available. Even if it was a Command that I could make a script to run that returned the value to alert on. I just don’t see any documentation about that value anywhere else but the graph inside the GUI.

Thanks!

sjoshiAnswer

Staff

You can obtain FAZ SNMP OID value from the support portal

Trap are has below:

fmTrapLogRateThreshold (.1.3.6.1.4.1.12356.103.0.0.404)
Indicates that the incoming log rate has exceeded the threshold

fmSysLogRate (1.3.6.1.4.1.12356.103.2.1.9)
Log receiving rate in number of logs per second.

Thanks, Salon

Sign up

Login with SSO

Login to the community

Login with SSO