Prevent CPU or host logging packet loss

In some cases, hyperscale firewall CPU or host logging packets can be dropped, resulting in lost log messages and incorrect traffic statistics. You can use the following command to change how your FortiGate queues CPU or host logging packets.

config log npu-server

set log-processor host

set log-processing {may-drop | no-drop}

end

may-drop the default CPU or host log queuing method is used. Log message packet loss can occur if the FortiGate is very busy.

no-drop use an alternate queuing method that prevents packet loss.