FortiAnalyzer Version 3.0 MR3 Administration Guide
148 05-30003-0082-20060925
Log rolling Network Analyzer
As the FortiAnalyzer unit receives network log records, it performs the following
tasks:
• verifies whether the log file has exceeded its file size limit
• if the file size is not exceeded, checks to see if it is time to roll the log file. You
configure the time to be either a daily or weekly occurrence, and when the roll
occurs.
When a network traffic log file reaches its maximum size, or reaches the
scheduled log rolling time, the FortiAnalyzer unit saves the network traffic log files
with an incremental number, and starts a new log file with the same name. For
example, the current network traffic log is xlog.log. Any subsequent saved network
traffic logs appear as xlog.n.log, where n is the number of rolled logs. For
example, xlog.4.log
To enable log rolling, go to Tools > Network Analyzer > Config.
Figure 73: Log rolling settings
Enable Network
Analyzer on
Select the port on the FortiAnalyzer unit to use for monitoring
network traffic.
Allocated Disk Space
(MB)
Enter the amount of disk space reserved for network traffic logs.
The dialog also displays the amount used of the allocated space.
When Allocated Disk
Space is All Used
Select what the FortiAnalyzer unit does when the allocated disk
space is filled up. Select to either overwrite the older log file or
stop logging until you can clear some room.
To avoid completely filling the hard disk space, use the log rolling
and uploading options.
Reuse settings from
standard logs
Select to use the same settings that you set for standard logs files
configured in Logs > Config.
Log rolling settings Use this area to define when the FortiAnalyzer unit should roll its
network traffic log files.