If I have disk logging disabled and I'm forwarding all logs to a FAZ that is unavailable, what is the negative effect on a FortiGate that has 100s or 1000s of logs building up in the queue? Will this potentially cause memory issues?
This is why it's critical to have two log targets. If your using log memory you can controlling the setting but typically by default it's to overwrite. Don't worry about the fortigate failing due to lost connection or FAZ not available.