Logging support and daily log limits
The daily log limits available for FortiGate devices depend on the device platform. These daily log limits can be expanded with an additional storage license. Adding additional storage licenses also enables FortiAnalyzer Cloud to receive logs from other supported devices like FortiClient and FortiMail.
For more information on licensing and SKUs, see the FortiAnalyzer Cloud Deployment Guide and FortiAnalyzer Cloud Datasheet.
FortiGate and FortiWeb devices
FortiAnalyzer Cloud supports logs from FortiGate and FortiWeb devices. Each FortiGate or FortiWeb device with an entitlement is allowed a fixed daily rate of logging.
When determining the daily log limit for FortiAnalyzer Cloud, the form factor of the model determines the log limits. The chart below identifies some models for each form factor as an example. It is not an exhaustive list.
The following rates are based on the FortiAnalyzer Cloud a la carte subscription:
FortiGate
|
Form Factor |
Example FortiGate Model |
Total daily log limit |
Rate limit quota |
|---|---|---|---|
|
Desktop or FGT-VM models with 2 CPU |
FortiGate 30 series, FortiGate 90 series | 200MB/Day |
6 logs/second |
|
1RU or FGT-VM models with 4 CPU |
FortiGate 100 series, FortiGate 600 series, FortiGate 800 series, FortiGate 900 series | 1GB/Day |
30 logs/second |
|
2 RU and above or FGT-VM models with 8 CPU and above |
FortiGate 1000 series and higher | 5GB/Day |
150 logs/second |
FortiWeb
|
Form Factor |
Example FortiWeb Model |
Total daily log limit |
Rate limit quota |
|---|---|---|---|
|
Desktop or FWB-VM models with 2 CPU or less |
FWB-100F FWB-VM (2 CPU or less) |
1GB/Day |
20 logs/second |
|
1RU and above or FWB-VM models with 4 CPU or higher |
FWB-400F FWB-600F FWB-1000F FWB-2000F FWB-3000F FWB-4000F FWB-VM (4 CPU or higher) |
5GB/day |
100 logs/second |
Once the limit has been reached, users must purchase additional storage in order for FortiAnalyzer Cloud to maintain logs for 12 months. You can purchase additional storage licenses to expand the daily logging limits for your FortiGate and FortiWeb devices. For more information about daily log limits included with additional storage licenses, see Additional Storage licenses.
Additional Storage licenses
Additional storage licenses are available to expand the base daily logging limits. Multiple of the same SKU may be combined.
|
Added daily log limit |
SKU |
Rate limit quota |
|---|---|---|
| +5 GB/day |
FC1-10-AZCLD-463-01-DD |
150 logs/second |
| +50 GB/day |
FC2-10-AZCLD-463-01-DD |
1500 logs/second |
| +500 GB/day |
FC3-10-AZCLD-463-01-DD |
15000 logs/second |
Daily log limits for non-FortiGate/FortiWeb devices
Purchasing any of the additional storage licenses above (for example, FC1-10-AZCLD-463-01-DD) also enables FortiAnalyzer Cloud to receive logs from FortiClient and FortiMail in addition to expanding the amount of logs it may store from FortiGates.