- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is it possible to allocate memory space for each log category in a Fortigate?
Hi everyone,
I want to allocate X, Y, etc. amounts of memory to storing certain log categories. Is it possible to do this in a Fortigate 100F?
Solved! Go to Solution.
- Labels:
-
FortiGate
Created on ‎07-19-2024 07:06 AM Edited on ‎07-19-2024 07:07 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @jefazo92 ,
As far as I know, You can specify how much memory space the logs will take globally, but not by categories.
NSE 4-5-6-7 OT Sec - ENT FW
Created on ‎07-19-2024 07:06 AM Edited on ‎07-19-2024 07:07 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @jefazo92 ,
As far as I know, You can specify how much memory space the logs will take globally, but not by categories.
NSE 4-5-6-7 OT Sec - ENT FW
Created on ‎07-19-2024 07:42 AM Edited on ‎07-19-2024 07:42 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you very much @ozkanaltas. Do you know how may I find the current (default) value assigned for memory logging? Is there a command which shows the current set value for
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @jefazo92 ,
You can see the default value with these commands.
config log memory global-setting
show full-configuration
NSE 4-5-6-7 OT Sec - ENT FW
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Category-based memory allocation is not possible in Fortigate. However, you can optimize the memory usage by tweaking the following settings
config log memory global-setting
set max-size 19568107
set full-first-warning-threshold 75
set full-second-warning-threshold 90
set full-final-warning-threshold 95
end
config log memory filter
set severity information <--- you can change it warning
set forward-traffic enable
set local-traffic enable
set multicast-traffic enable
set sniffer-traffic enable
set ztna-traffic enable
set anomaly enable
set voip enable
set forti-switch enable
end
