FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
jasonhong
Staff
Staff
Article Id 231397

Description

 

This article describes how to check the log receiving rate in FortiAnalyzer.

 

Scope

 

FortiAnalyzer.

 

Solution

 

1) Check the log rate by using the following command.

 

# diagnose fortilogd lograte

 

FAZ# diag fortilogd lograte

last 5 seconds: 0.2, last 30 seconds: 0.7, last 60 seconds: 17.7

 

2) Check the log rate by each ADOM using the following command.

 

# diagnose fortilogd lograte-adom <adom_name>

 

FAZ# diagnose fortilogd lograte-adom root

                                        Logs Per Second

               Adom Name       Last 5sec      Last 30sec      Last 60sec

--------------------------------------------------------------------------

                    root            0.40            0.23            0.17

 

3) Check the log rate by each logging device using the following command.

 

# diagnose fortilogd lograte-device <device_name>

 

FAZ# diagnose fortilogd lograte-device FGVM010000108xxx

Logs per second

Totals                    Last Hour       Day      Week

-------------------------------------------------------

        FGVM010000108xxx:      1.07      0.23      0.11

 

4) Check the log rate by total using the following command.

 

# diagnose fortilogd lograte-total

 

FAZ# diagnose fortilogd lograte-total

Logs per second

Totals                    Last Hour       Day      Week

-------------------------------------------------------

                        :      1.53      0.33      0.16

Contributors