Configuring log rate receiving limits

You can manually configure log rate limits for devices sending logs to FortiAnalyzer. By default, no rate limit is enforced.

When setting the log rate limit to manual in the CLI, you can specify a default device log rate and a per device rate. Both a default and per device limit can be set simultaneously, in which case the per device limit will take priority for configured devices.

You can view configured logging rates in the CLI using the following command: diagnose test application fortilogd 17 and diagnose test application oftpd 17.

To configure the default device log rate limit:

1. In the FortiAnalyzer CLI, enter the following commands:

   config system log ratelimit

   set mode manual

   set device-ratelimit-default <set the rate limit, for example 2000>

   end

To configure the log rate limit per device:

1. In the FortiAnalyzer CLI, enter the following commands:

   config system log ratelimit

   set mode manual

   config device

   edit <device profile, for example "1">

   set device "<serial number>"

   set ratelimit <set the rate limit, for example 3000>

   next

   end

To disable the log rate limit:

1. In the FortiAnalyzer CLI, enter the following commands:

   config system log ratelimit

   set mode disable

   end