Products
FortiAnalyzer v4.0 MR2 |
FortiAnalyzer v4.0 MR3 |
Description
When local SQL is enabled a FortiAnalyzer will log to both the indexer log and to the SQL log, this will effectively double the log usage. Consequently disk usage will doubled when local SQL is enabled.
Scope
FortiAnalyzer v4.0
Solution
When disk space is limited, is not recommend to use local SQL. It is suggest to either use remote SQL or disable local SQL.
In order to disable local SQL, run the command "execute sql-local remove-db" and this will allow the disk used by local SQL to be freed.