FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
jasonhong
Staff & Editor
Staff & Editor
Article Id 231397

Description

 

This article describes how to check the log receiving rate in FortiAnalyzer.

 

Scope

 

FortiAnalyzer.

 

Solution

 

1) Check the log rate by using the following command.

 

# diagnose fortilogd lograte

 

FAZ# diag fortilogd lograte

last 5 seconds: 0.2, last 30 seconds: 0.7, last 60 seconds: 17.7

 

2) Check the log rate by each ADOM using the following command.

 

# diagnose fortilogd lograte-adom <adom_name>

 

FAZ# diagnose fortilogd lograte-adom root

                                        Logs Per Second

               Adom Name       Last 5sec      Last 30sec      Last 60sec

--------------------------------------------------------------------------

                    root            0.40            0.23            0.17

 

3) Check the log rate by each logging device using the following command.

 

# diagnose fortilogd lograte-device <device_name>

 

FAZ# diagnose fortilogd lograte-device FGVM010000108xxx

Logs per second

Totals                    Last Hour       Day      Week

-------------------------------------------------------

        FGVM010000108xxx:      1.07      0.23      0.11

 

4) Check the log rate by total using the following command.

 

# diagnose fortilogd lograte-total

 

FAZ# diagnose fortilogd lograte-total

Logs per second

Totals                    Last Hour       Day      Week

-------------------------------------------------------

                        :      1.53      0.33      0.16

Contributors