Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Ron_Uss
New Contributor III

Exceed log rate per second on FAZ VM

Hello gyus,

on our FAZ-VM-BASE I found message "Log rate (xxx logs/second) exceeds the peak limit (50 logs/second) over the last 30 minutes." I think, that licensing on VM is about logs/day and storage and limit logs/sec is only for HW FAZ (according to data sheet).

So what exactly this message means? Is only information about amount of peak of logs or some limits for this VM?

Many thanks

 

 

NSE8 #3111

NSE8 #3111
1 Solution
chall_FTNT
Staff
Staff

The peak limit is a value derived from the logs/day licensing.  Although exceeding peak limit is permitted, if this peak limit is consistently exceeded, it is an early warning that you are at risk of exceeding the daily licensed limit.

 

To see the derived limits: (sample output) FortiAnalyzer # get sys loglimits GB/day : 1 Peak Log Rate : 50       #<--- derived value Sustained Log Rate : 30     #<--- derived value

Chris Hall
Fortinet Technical Support

View solution in original post

3 REPLIES 3
chall_FTNT
Staff
Staff

The peak limit is a value derived from the logs/day licensing.  Although exceeding peak limit is permitted, if this peak limit is consistently exceeded, it is an early warning that you are at risk of exceeding the daily licensed limit.

 

To see the derived limits: (sample output) FortiAnalyzer # get sys loglimits GB/day : 1 Peak Log Rate : 50       #<--- derived value Sustained Log Rate : 30     #<--- derived value

Chris Hall
Fortinet Technical Support
Ron_Uss
New Contributor III

Thank you, Chall!

NSE8 #3111

NSE8 #3111
seadave

Sure seems like a hard limit is in place.  Our FAZ rate graphs look for all intents and purposes as if they are being limited at ~130 with only the occasional peak deviation.  It can be much less during off-peak hours, but appears to "clip" at 130 during the workday.  We are licensed on the VM for 2G/day and 1TB.  I have 8 cores and 16G of RAM allocated to the VM.  NICS are VMXNET3 over 10G links.

 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors