Fortigate load logs from FAZ extremely slow.

[Potato]

Hi all.

I just received the below error via reviewing Forward logs from Fortigate.

Request is proceeding slowly X% complete

The Fortigate is now running on 6.2.9 and sends the log to FAZ.

Anyone can help?

[JianWu]

Try specifying a time range.. like last 24 hours or last 7 days.

[pavankr5]

There are couple of points that need to be checked :

• Are FGTs sending logs real-time to the FAZ?You need to see the log setting 
• Logs going out from the FGT ?you need to run sniffer on FGT itself to see if the logs going out from the FGT itself 
• Check the which FGTs are sending logs ? Is the IP correct ?
• Verify the FAZ compatibility Chart  https://docs.fortinet.com/document/fortianalyzer/7.4.0/compatibility-with-fortios
• Check to see if logs are being received by FAZ 
•  What is the logging status on FAZ (green, red )
• What do you see in log view ? Can you switch to realtime and historical logs ? any logs there
  https://docs.fortinet.com/document/fortianalyzer/7.4.0/administration-guide/294662/viewing-historica...
  
  Thanks
  Pavan

[YBKruthi]

Hi @Potato,

I suspect that the connectivity is timing out and unable to fetch forward logs from FAZ.

you can perform below action plans:

1) Ensure you have a stable network/internet connection.

2) You can increase the timeout as below.

> config log fortianalyzer settings

> set conn-timeout
conn-timeout Enter an integer value from <1> to <3600> (default = <10>).

please increase the time out and confirm the status.

Regards,

Kruthi