Skip to main content
Fabinho
New Member
February 26, 2026
Solved

Your daily logs GB/day limit is exceeded within the last 7 days.

  • February 26, 2026
  • 3 replies
  • 559 views

Hello everyone,

 

In a Fortinet FortiAnalyzer VM environment, we are frequently seeing the alert:

[Your daily logs GB/day limit is exceeded within the last 7 days]

I would like to hear from the community about real-world impacts when the daily log ingestion limit is exceeded.

Have you experienced log loss, delayed indexing, or incomplete reports?

Any noticeable performance impact or issues with analytics and event correlation?

 
 


Note: I am fully aware that the daily gigabyte allowance is quite low and I am willing to upgrade the license, I just wanted to know what I might be compromising on my analyzer.

 

Screenshot_1.png

Best answer by farhanahmed

@Fabinho  The KB article is official doc and it states that:

"Operating your VM beyond the licensed capacity could affect the ability to receive technical support." 

Meaning FAZ will not stop receiving logs but the next time if you open a ticket the support team might help you but if this continues we will ask you to first get appropriate license before tshooting any issue.

 


FMG/FAZ/FSR Support

3 replies

esalija
Staff
Staff
February 26, 2026
Fabinho
FabinhoAuthor
New Member
February 26, 2026

Hi Esalija, thank you for your response.

I’ve already reviewed both KB articles you shared. In fact, one of them highlights a critical point that is exactly the focus of my question.

What I’m looking for is not only technical guidance to reduce log volume, but official evidence to internally justify the need to upgrade our FortiAnalyzer license. The KB itself states:

[perating your virtual machine beyond the licensed capacity may affect your ability to receive technical support]

This statement is very relevant for us, as it indicates a direct risk to our ability to open and receive support from TAC when operating beyond the licensed capacity.

My goal is to clearly confirm and document this risk, so we can properly justify to the company the urgency of purchasing or upgrading the appropriate license, and avoid future issues related to support, troubleshooting, and licensing compliance.

If there is any additional official documentation or practical experience that further reinforces this point, it would be greatly appreciated.

Thank you.

farhanahmed
Staff
Staff
February 27, 2026

@Fabinho  The KB article is official doc and it states that:

"Operating your VM beyond the licensed capacity could affect the ability to receive technical support." 

Meaning FAZ will not stop receiving logs but the next time if you open a ticket the support team might help you but if this continues we will ask you to first get appropriate license before tshooting any issue.

 


FMG/FAZ/FSR Support