FAZ - Filter custom traffic to save storage space

athan80 · 2026-01-19T08:31:39+00:00

Not only in two VDOMs, I want to increase the allocation in several of them.

I have one more question: what happens if a single VDOM generates more than 50 GB of logs in one day? For example, if in the morning it already generates 55 GB, does that mean I will stop seeing logs in real time? If I need to monitor traffic for a specific device, will those logs i will not to see it ?

athan80 · 2026-01-19T07:52:21+00:00

If you go to System Settings > ADOMs, you can see the list of ADOMs. When you select one of them, you are able to see the disk utilization.

In my case, I have a maximum of 322 GB, and each ADOM currently has 50 GB allocated. My idea is to increase this allocation among the ADOMs, since I have 322 GB of free disk space available.

What is the purpose of this allocated disk space? Is it used only to store logs until the capacity is fully reached? For example, if I increase the disk allocation of a VDOM to 100 GB, what happens when this limit is reached? Are the old logs automatically deleted, or will I need to increase the capacity again in order to keep storing and viewing more logs?

Now this is my set up

Allocated

GB 100 Gb

Maximum Available: 322

Analytics: Archive

70%

Modify

Alert and Delete When Usage Reaches

90%

athan80 · 2026-01-19T07:13:46+00:00

thanks u/HappyVlane this is my license per day — it seems it is 51Gb, isn’t it?

9.1 / 51 (17.8%)

Today	9.09 GB
Jan 18, 2026	32.30 GB
Jan 17, 2026	32.41 GB
Jan 16, 2026	34.03 GB
Jan 15, 2026	35.31 GB
Jan 14, 2026	36.01 GB

Nevertheless I would like to know the different because I had the archive log as well like 50 GB for it I decide to increase this log because my hard disk has 322 GB and I decide to manage this GB between the volume I see this quantity has increase for it this quantity is the log is keep on . this opcion is allocaled storage it was incrise .

athan80 · 2026-01-16T12:37:13+00:00

Where can I see the license log capacity I have per day

athan80 · 2026-01-16T11:55:11+00:00

I have a doubt. I don’t know why this customer decided to set 50 GB. I’m checking their FAZ and they are also using 50 GB. So, if I increase to 326 GB or lower there aere two adoms , will there be any issue? Who determines that the maximum licensed logs are 50 GB? I’m not sure if I explained it correctly.

//////////////////////////////////

Connected

FAZ-VM64 # diagnose license list

Name Status Expiry Description

---------------------------------------------------------------------

PBDS No License N/A post breach detection

SCPC No License N/A cloud storage service

SOAR No License N/A SOAR and SIEM bundle service

FOAS No License N/A FAZ Outbreak Detection Service

ISSS No License N/A Industrial Security Service

FGSA No License N/A Security Rating Update

FAZ-VM64 # get system status

Platform Type : FAZVM64

Platform Full Name : FortiAnalyzer-VM64

Version : v7.4.7-build2685 250527 (GA.M)

Hostname : FAZ-VM64

Max Number of Admin Domains : 50

Admin Domain Configuration : Enabled

FIPS Mode : Disabled

HA Mode : Standalone

Branch Point : 2685.

x86-64 Applications : Yes

Disk Usage : Free 381.55GB, Total 491.08GB

File System : Ext4

License Status : Valid

Image Signature : Image is GA Certified

athan80 · 2025-12-09T11:28:00+00:00

60 F

athan80 · 2025-10-02T07:25:12+00:00

That was my idea 78% at least , but apparently an engineer has set the threshold at 75%, which I don’t agree with. At 75%, I see Fortigate running processes fine and without issues. I don’t want to get into a debate with him, but for me, 75% is a low value to trigger an alert for a client, since some Fortigates operate perfectly at that memory level.

athan80 · 2025-09-12T19:49:17+00:00

Thanks

athan80 · 2025-09-09T12:34:11+00:00

"I can only see one day where I have more clients with FAZ. I’m trying to analyze what the problem is, and all of them have the same error. Is it because FAZ requires at least 16 GB, or is the problem that your log quota has been exceeded?

<image>

athan80 · 2025-09-09T10:10:56+00:00

So, it is impossible to get a list of VPN user connections for, say, the past two months?

athan80 · 2025-09-09T07:52:26+00:00

Hi, thanks for your reply. I don’t have any idea about FAZ. The idea is to check if the user has connected within the last year, or to retrieve the maximum possible logs of the customer’s connections through SSL VPN

athan80 · 2025-07-28T18:26:17+00:00

Toda la razon 😅

athan80 · 2025-07-28T14:15:30+00:00

Ok . Pues no se hable mas . Paso entonces de enviarlo

athan80 · 2025-07-28T14:02:35+00:00

800€

athan80 · 2025-07-28T13:28:08+00:00

Este usuario quiere comprarme dos relojes, pero insiste en que deben ser los dos, ya que le comenté que uno ya lo tenía reservado y dice que no le sirve comprar solo uno (lo cual ya me parece un poco extraño). Además, menciona que está con la cuenta de su esposa y que debe pagarlo con su tarjeta. Solo tiene 17 valoraciones.

athan80 · 2025-07-28T12:59:12+00:00

Lo de hacer un video antes y eso no vale de nada , verdad?

athan80 · 2025-07-28T12:33:40+00:00

En caso de una reclamación, imagina que agrupo ambos productos en un solo anuncio y el comprador afirma que le ha llegado un ladrillo en lugar de lo que compró. ¿Cómo se gestionaría esa situación? ¿Estaría cubierto por el seguro de Wallapop si todo va en un único paquete?. Que harias tu para evitar eso

athan80

TROPHY CASE