You must add and register devices and VDOMs to FortiAnalyzer to enable the device or VDOM to send logs to FortiAnalyzer. Registered devices are also known as devices that have been promoted to the DVM table.
You must configure devices to send logs to FortiAnalyzer. For example, after you add and register a FortiGate device with FortiAnalyzer, you must also configure the FortiGate device to send logs to FortiAnalyzer. In the FortiGate GUI, go to Log & Report > Log Settings, and enable Send Logs to FortiAnalyzer/FortiManager.
If you are using high availability, you must specify the FortiGate HA group name when adding a FortiGate cluster.