FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
awasfi_FTNT
Staff
Staff
Article Id 190197

Description

 
This article describes the issue when VDOMs are enabled, the log disk quota is limited to a default value that varies based on the device model and hardware.

This value can be increased or reduced, however, the log quota storage is shared between VDOMs.
 
Scope
 
FortiGate.


Solution

 

The following commands are only available when VDOMs are enabled:
 
config  global
    config system resource-limits
        set log-disk-quota <quota_size>
    end
end
 
The 'get' command can be used to view the current settings, including disk quota size:
 
config  global
    config system  resource-limits
    get

Also available range of the quota can be confirmed using the command:
 
    set log-disk-quota ?
 
The log-disk-quota is calculated as (default-maximum storage) - (web-opt disk quota), where web-opt is the quota for web cache and WAN optimization.

To check WAN optimization and web cache quota, use the commands:
 
config global
    config  wanopt storage
        edit Internal
        get
        webcache-storage-size: <quota size>
        wan-optimization-cache-storage-size: <quota size>
 
Where Internal is the disk storage name.

However, to guarantee a specific log quota for a specific VDOM, the quota must be set under 'vdom-property'.
 
config global
    config  system  vdom-property
        edit  <vdom1_name>
            set log-disk-quota <vdom quota size>
        next
        edit <vdom2_name>
            set log-disk-quota <vdom quota size>
        next
end
 
The quota can then be assigned under each VDOM for disk logging:
 
config vdom
    edit <vdom_name>
        config log disk setting
            set log-quota 3000
 
Notes:
  1. The total quota cannot be assigned as part of it will be used by reports.

  2. To reduce the log quota under 'vdom-property', it is necessary to first unset the log quota on VDOM under 'log disk setting'.

  3. Versions 5.0 up to 6.4 are out of engineering support. So these commands might be different on higher versions. Consider upgrading the firmware level on the device to a supported version (v7.0 up to v7.6). Here, check the firmware path and compatibility depending on the hardware: Upgrade Path Tool Table.