FCP_FAZ_AN-7.4 · Question #33
Refer to the exhibit. What does the data point at 12:20 indicate?
The correct answer is A. The log insert log time is increasing. Insert Rate vs. Receive Rate is a graph that shows the rate at which raw logs reach the FortiAnalyzer (receive rate) and the rate at which they are indexed (insert rate) by the SQL database and the sqlplugind daemon. At minimum, the difference between these parameters should be…
Question
Refer to the exhibit. What does the data point at 12:20 indicate?
Exhibit
Options
- AThe log insert log time is increasing.
- BFortiAnalyzer is using its cache to avoid dropping logs.
- CThe performance of FortiAnalyzer is below the baseline.
- DThe sqiplugind service is caught up with the logs
How the community answered
(26 responses)- A73% (19)
- B4% (1)
- C15% (4)
- D8% (2)
Explanation
Insert Rate vs. Receive Rate is a graph that shows the rate at which raw logs reach the FortiAnalyzer (receive rate) and the rate at which they are indexed (insert rate) by the SQL database and the sqlplugind daemon. At minimum, the difference between these parameters should be generally consistent. Log Insert Lag Time shows the amount of time between when a log was received and when it was indexed. Ideally, this parameter should be as small as possible with the occasional spikes according to the network activity being logged. A good baseline should be created to allow for the identification of possible performance issues.
Topics
Community Discussion
No community discussion yet for this question.