SQL logging on FortiGate with flash disk at 4.0 MR3 patch7

Description

After upgrade of a FortiGate with internal flash disk to 4.0 MR3 patch7, it may be noticed that even if the SQL quota was not set then the SQL log will only go up to a certain size and the log message "Sql Log is 99% full. System will overwrite old logs now.” may be seen.

Scope

SQL logging.

Solution

This is due to a change in the way SQL logging is performed on the local log disk.

In 4.0 MR3 patch7, all FortiGate untis with a flash disk will move the SQL logging to memory and the maximum size is 10% of the available memory. For example a FortiGate 100D having 2GB of RMA would have a maximum SQL log size of 200MB.

The command # dia hardware sysinfo memory can be used to check the total memory of the FortiGate.