FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
iyotov
Staff
Staff
Article Id 207583

Desription

 

This article describes the new swap size dependencies on the RAM and storage disk sizes.

 

Scope

 

FortiAnalyzer after versions 6.4.8 and 7.0.3.

 

Solution

 

The new logic is as follows:

 

[Sizes in Gigabytes] RAM <= 8 8 < RAM <= 16 16 < RAM < 64
RAM >= 64
Storage < 100 Swap = 2 Swap = 2 Swap = 2 Swap = 2
Storage >= 100 Swap = RAM x3 Swap = RAM x2 Swap = RAM Swap = 64

 

Note.

The swap size cannot exceed 4% of the storage disk size and is always a multiple of 2 (i.e. 4, 6, 8, 10,  etc...).

 

Examples:

- Unit with 8 GB RAM and 99 GB disk would have 2 GB swap, because 4% of 99 is 3.96 which is not a multiple of 2.

- Unit with 8 GB RAM and 100 GB disk would have 4 GB swap, limited by the 4% max disk use.

- Unit with 8 GB RAM and 1000 GB disk would have 24 GB swap, because RAM x3 and none of the limits is reached.

 

Related article explaining the same logic for the previous FortiAnalyzer versions:

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-FortiAnalyzer-swap-size-dependency-on-...

Contributors