Skip to main content
Potato
New Member
March 6, 2020
Question

What is the behaviour if I disable local log on Memory but also send log to Forticloud?

  • March 6, 2020
  • 4 replies
  • 6217 views

Hi Guy,

 

Just a tricky question.

 

 

I am using Fortigate 80C what has no local storage.

So the Log is stored in Ram as known.

 

Well, then I configure somethings like attached.

 

 

 

My question is,

 

In my opinion,

If I select the upload option as "Every 5 Minutes",

then these "5 Minutes logs" must be stored somewhere [-- Ram?] before sending it to the cloud.

 

And when I disable the Local Log on Ram, how does Fortigate handle these "5 Minutes logs"?

    4 replies

    ShawnZA
    New Member
    March 6, 2020

    Your logs will be sent to the cloud every 5 minutes, probably saved in memory, not sure myself, but disabling the Local Log to memory will have no effect on the 5 minute setting, your logs will go out fine. Used to do that with a old 300C.

     

    But I would just set it to upload in realtime in any case as that's what the documentation says you set it to if you want to upload to the cloud

    Potato
    PotatoAuthor
    New Member
    March 6, 2020

    ShawnZA wrote:

    Your logs will be sent to the cloud every 5 minutes, probably saved in memory, not sure myself, but disabling the Local Log to memory will have no effect on the 5 minute setting, your logs will go out fine. Used to do that with a old 300C.

     

    But I would just set it to upload in realtime in any case as that's what the documentation says you set it to if you want to upload to the cloud

    I wonder if the Disable Log on Memory + Real-time Logging is going to decrease the memory consuming by FortiOS.

    emnoc
    New Member
    March 6, 2020

    Probably not but you can graph it in  SNMP and find out. I haven't seen any big impacts with memory usage and those two settings personally.

     

    Ken Felix

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.