Logs on system memory

Author
m.nedal
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/30 07:42:22
  • Status: offline
2019/09/12 04:28:58 (permalink)
0

Logs on system memory

Hello,
 
On a Fortigate system memory log storage (like 50E and 60E), how the logs storage is measured?
For example, on 6pm today can I view the logs from 4pm of yesterday? If not, what is the reasoning for consulting the logs on this type of firewalls?
 
Thank you
#1

5 Replies Related Threads

    Markus
    Gold Member
    • Total Posts : 194
    • Scores: 22
    • Reward points: 0
    • Joined: 2015/03/19 07:30:23
    • Location: Switzerland
    • Status: offline
    Re: Logs on system memory 2019/09/12 04:32:41 (permalink)
    4 (1)
    Hi,

    It depends how much log you generate and how much "space=memory" you reserve for them. If the "space" running out, oldest logs are purged.

    Best
    #2
    Dave Hall
    Expert Member
    • Total Posts : 1475
    • Scores: 163
    • Reward points: 0
    • Joined: 2012/05/11 07:55:58
    • Location: Canada
    • Status: offline
    Re: Logs on system memory 2019/09/12 07:33:48 (permalink)
    4 (1)
    Logging to memory quickly runs out, even if you are not logging that much info - it's really meant to help with troubleshooting something in near-real time.   If your company has needs to keep track/records of certain traffic, it should invest in a logging device (i.e. FortiAnalyzer, cloud, syslog, etc.). 
     
    That said, the 60E does have a 128 GB SSD (according to specs) (The 50E model does not, but the 51E models does).  You could try enabling logging to disk, but on those smaller fgt models it's really not advisable. 

    NSE4/FMG-VM64/FortiAnalyzer-VM/5.4/6.0 (FWF40C/FW92D/FGT200D/FGT101E)/ FAP220B/221C
    #3
    Markus
    Gold Member
    • Total Posts : 194
    • Scores: 22
    • Reward points: 0
    • Joined: 2015/03/19 07:30:23
    • Location: Switzerland
    • Status: offline
    Re: Logs on system memory 2019/09/12 08:06:49 (permalink)
    4 (1)
    Good addition Dave, thanks, but unfortunately, the 60E don't have local storage.
    https://www.fortinet.com/...1by_D2Ic46Fsk94yLkW5OD
    #4
    m.nedal
    New Member
    • Total Posts : 5
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/08/30 07:42:22
    • Status: offline
    Re: Logs on system memory 2019/09/16 04:08:11 (permalink)
    0
    Thank you guys  this was helpful
     
    I'm going for the 61E
     
    BR
    #5
    emnoc
    Expert Member
    • Total Posts : 5238
    • Scores: 347
    • Reward points: 0
    • Joined: 2008/03/20 13:30:33
    • Location: AUSTIN TX AREA
    • Status: offline
    Re: Logs on system memory 2019/09/16 06:30:53 (permalink)
    0
    Yes  that's correct, plus 128GB is not all for logging either. No FGT uses the complete disk for logging.
     

    PCNSE,  NSE , Forcepoint ,  StrongSwan Specialist
    #6
    Jump to:
    © 2019 APG vNext Commercial Version 5.5