Re: packet size too big in fsso log. Should I worry?
it looks like something is trying to connect to local collector port 8988 and connection is refused and terminated by FortiGate.
Any time pattern ? Any network scanner operating in your network ? Or just miss-configured app trying to use the port ?
I'd go after time patterns first, then scan/listen on the net for any other scanner activities.