Fortinet 3.0 MR7 manual Rolling and uploading Network Analyzer logs

Rolling and uploading Network Analyzer logs Network Analyzer

4Select the download options that you want, then select OK.

Convert to CSV format

Compress with gzip

Downloads the log format as a comma-separated value (.csv) file instead of a standard .log file. Each log element is separated by a comma. CSV files can be viewed in spreadsheet applications.

Compress the .log or .csv file with gzip compression. For example, downloading a log-formatted file with gzip compression would result in a download with the file extension .log.gz.

5If prompted by your web browser, select a location to save the file, or open it without saving.

Rolling and uploading Network Analyzer logs

You can control log file size and manage log file consumption of the FortiAnalyzer disk space with log rolling and uploading.

The Network Analyzer captures a very detailed network traffic information, and its log volume can consume the FortiAnalyzer unit’s hard disk space more rapidly than standard logs. Rolling and uploading logs frees hard disk space to collect further data.

As the FortiAnalyzer unit receives new log items, it performs the following tasks:

•verifies whether the log file has exceeded its file size limit

•if the file size is not exceeded, checks to see if it is time to roll the log file. You configure the time to be either a daily or weekly occurrence, and when the roll occurs

When a log file reaches its maximum size, or reaches the scheduled time, the FortiAnalyzer unit saves the log files with an incremental number, and starts a new log file with the same name. For example, the current attack log is xlog.log. Any subsequent saved logs appear as xlog.n.log, where n is the number of rolled logs.

If you have enabled log uploading, you can choose to automatically delete the rolled log file after uploading, thereby limiting the amount of disk space used by rolled log files.

To enable log rolling, or to disable Network Analyzer, go to Tools > Network Analyzer > Config.

	FortiAnalyzer Version 3.0 MR7 Administration Guide
154	05-30007-0082-20080908