FortiAnalyzer Version 3.0 MR7 Administration Guide
154 05-30007-0082-20080908
Rolling and uploading Network Analyzer logs Network Analyzer
4Select the download options that you want, then select OK.
5If prompted by your web browser, select a location to save the file, or open it
without saving.
Rolling and uploading Network Analyzer logs
You can control log file size and manage log file consumption of the FortiAnalyzer
disk space with log rolling and uploading.
The Network Analyzer captures a very detailed network traffic information, and its
log volume can consume the FortiAnalyzer unit’s hard disk space more rapidly
than standard logs. Rolling and uploading logs frees hard disk space to collect
further data.
As the FortiAnalyzer unit receives new log items, it performs the following tasks:
• verifies whether the log file has exceeded its file size limit
• if the file size is not exceeded, checks to see if it is time to roll the log file. You
configure the time to be either a daily or weekly occurrence, and when the roll
occurs
When a log file reaches its maximum size, or reaches the scheduled time, the
FortiAnalyzer unit saves the log files with an incremental number, and starts a new
log file with the same name. For example, the current attack log is xlog.log. Any
subsequent saved logs appear as xlog.n.log, where n is the number of rolled logs.
If you have enabled log uploading, you can choose to automatically delete the
rolled log file after uploading, thereby limiting the amount of disk space used by
rolled log files.
To enable log rolling, or to disable Network Analyzer, go to Tools > Network
Analyzer > Config.
Convert to CSV
format
Downloads the log format as a comma-separated value (.csv)
file instead of a standard .log file. Each log element is separated
by a comma. CSV files can be viewed in spreadsheet
applications.
Compress with gzip Compress the .log or .csv file with gzip compression. For
example, downloading a log-formatted file with gzip compression
would result in a download with the file extension .log.gz.