Technical Tip: Disk optimization

[Serxhio]

Description	This article details the optimization of disk logging on FortiGate firewalls.
Scope	FortiGate, memory, log, disk.
Solution	By design FortiGate uses 75% of the disk space. Hard Disk Utilization by FortiGate. To help manage log data efficiently, ensure important events are recorded while optimizing disk usage, the following FortiGate settings can be used: config log disk setting This command is used to configure global settings for local disk logging. It governs how logs are stored, managed, and maintained on the device's local storage. Read about full settings in the CLI reference. When dealing with high disk usage, the following actions can be taken for optimization: Defines the behavior of the device when the local disk reaches its capacity: set diskfull [overwrite|nolog] Allocate specific disk space quotas for different log types: set log-quota {integer} Consider uploading to external storages (check all options on the document above). Furthermore, use config log disk filter to define filters for which log messages are recorded on the local disk, based on the following criteria: Severity Level; Traffic Type; Log Type. Filters can be defined which log messages are recorded on the local disk, based on the full settings in FortiGate CLI reference These settings can be used to further optimize the log disk usage by focusing on recording only the necessary logs and reducing the volume of log data. Related document: config log disk filter