We are getting below error on FortiAnalyzer and want to know how we can check that why daily logs are exceeding and what is the reason and solution to stop it.
"You have exceeded your daily logs GB/Day licensing limit within the last 7 days"
i have to provide solid reason to customer that why its exceeding.
Appreciate your support.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Dear,
Please check the below link:
https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-Minimizing-logging-from-FortiGate-to/...
Fortianalyzer does not provide any info regarding this - not what logs are in excess, nor from which Fortigates (the limit is calculated as a cumulative log intake over some time, if serving multiple FGTs). We cannot even know for sure what happens to those excess logs - from Fortinet viewpoint, it is undetermined behavior, so they cannot say if those logs are being dropped or still logged.
In other words - you don't really have means to answer "why this happens", only as @nnair mentioned, you can try and reduce volume of logs sent to the FAZ until this error message disappears.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1732 | |
1106 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.