question

stylus avatar image
0 Likes"
stylus asked

How many log entries will FortiGate cache if FortiAnalyzer is not reachable?

Hi all, the question title says it all. What exactly happens if FortiAnalyzer is down for some time?

  • Will the FortiGate cache logs in memory or on disk?
  • How large is that log cache?
  • Will we overwrite old entries if the cache is full (ring buffer)?
  • How would I configure a FortiGate to minimize log loss in case FortiAnalyzer is down for a couple of hours?


Thanks!

FortiGateFortiAnalyzerLogging
10 |600

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

0 Answers

·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Welcome to FortiAnswers

FortiAnswers is the space dedicated to FortiSASE and FortiOS questions and suggestions.

  • Please review the Community guidelines
  • If you are a moderator, please refer to the Moderation guidelines
  • If something in the above guidelines is unclear, please post your question to the Community Feedback space or the Moderators' space