Prevent CPU or host logging packet loss
In some cases, hyperscale firewall CPU or host logging packets can be dropped, resulting in lost log messages and incorrect traffic statistics. You can use the following command to change how your FortiGate queues CPU or host logging packets.
config log npu-server
set log-processor host
set log-processing {may-drop | no-drop}
end
may-drop the default CPU or host log queuing method is used. Log message packet loss can occur if the FortiGate is very busy.
no-drop use an alternate queuing method that prevents packet loss.