nse5_faz-72 Exam - Question 8

Question

Refer to the exhibit. What does the data point at 12:20 indicate?

Examice · Accepted Answer

At 12:20, the graph shows a divergence between the receive rate and the insert rate, with the receive rate spiking higher than the insert rate. This indicates an increasing lag time between when logs are received and when they are inserted into the database, meaning the log insert lag time is increasing.

DaniSerb · Answer

Insert Rate vs. Receive Rate is a graph that shows the rate at which raw logs reach the FortiAnalyzer (receive rate) and the rate at which they are indexed (insert rate) by the SQL database and the sqlplugind daemon. At minimum, the difference between these parameters should be generally consistent.

Log Insert Lag Time shows the amount of time between when a log was received and when it was indexed. Ideally, this parameter should be as small as possible with the occasional spikes according to the network activity being logged. A good baseline should be created to allow for the identification of possible performance issues.

Reference: FortiAnalyzer Analyst Study Guide for FortiAnalyzer 7.2

ebenav11 · Answer

Option C

rian00z_ · Answer

C is correct

nse5_faz-72 Exam - Question 8

Discussion