Log fech between FAZ appliances is slow.
When fetching logs from this device, the maximum speed of the fetch seems to be approximately 25 mb/s (observed through interface bandwidth delta at time of starting the fetch on the firewall this traffic passes through) while every device in the network should be capable of at least 1 gb/s and the network is not saturated. We would like to increase the speed as a multi-TB fetch will take weeks at this pace.
I was able to gain some improvement by increasing the "config system log-fetch server-settings" parameters of max connections and max sessions, but both are at their maximum of 10. Neither the server or client FAZ are reaching high CPU/memory/disk usage during the fetch.
I had took a look a the uptime but not able post the images on this forum I'm getting errors
1st image is
Load average 0.73 0.66 .065
2nd image
Load average 3.19 2.90 2.84
I have attached the exec top results for both the server and client FAZ involved in the Fetch. Neither seem particularly alarming when looking at the overall devices statistics. The first screenshot is the FAZ the logs are being fetched from (server), the second is the client receiving the logs. Overall CPU usage is floating around 1% for server, 7% for client per their System Resources dashboard widget, and "get system performance" results. have attached the exec top results for both the server and client FAZ involved in the Fetch. Neither seem particularly alarming when looking at the overall devices statistics. The first screenshot is the FAZ the logs are being fetched from (server), the second is the client receiving the logs. Overall CPU usage is floating around 1% for server, 7% for client per their System Resources dashboard widget, and "get system performance" results
Any Ideas
