Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

Configuring log storage policy

The log storage policy affects the logs and SQL database of the device associated with the log storage policy.

If you change log storage settings, the new date ranges affect Analytics and Archive logs currently in the FortiAnalyzer device. Depending on the date change, Analytics logs might be purged from the database, Archive logs might be added back to the database, and Archive logs outside the date range might be deleted.

To configure log storage settings:
  1. Go to System Settings > Storage Info.
  2. Double-click on an ADOM, right-click on an ADOM and then select Edit from the menu, or select the ADOM then click Edit in the toolbar. Scroll to the log storage policy sections at the bottom of the Edit Log Storage Policy pane.

  3. Configure the following settings, then click OK.

    Data Policy

     

     

    Keep Logs for Analytics

    Specify how long to keep Analytics logs.

     

    Keep Logs for Archive

    Specify how long to keep Archive logs.

    Make sure your setting meets your organization’s regulatory requirements.

    Disk Utilization

     

     

    Maximum Allowed

    Specify the amount of disk space allotted. See also Disk space allocation.

     

    Analytics : Archive

    Specify the disk space ratio between Analytics and Archive logs. Analytics logs require more space than Archive logs. Click the Modify checkbox to change the setting.

     

    Alert and Delete When Usage Reaches

    Specify the percentage of allotted disk space usage that will trigger an alert messages and start automatically deleting logs. The oldest Archive log files or Analytics database tables are deleted first.

Configuring log storage policy

The log storage policy affects the logs and SQL database of the device associated with the log storage policy.

If you change log storage settings, the new date ranges affect Analytics and Archive logs currently in the FortiAnalyzer device. Depending on the date change, Analytics logs might be purged from the database, Archive logs might be added back to the database, and Archive logs outside the date range might be deleted.

To configure log storage settings:
  1. Go to System Settings > Storage Info.
  2. Double-click on an ADOM, right-click on an ADOM and then select Edit from the menu, or select the ADOM then click Edit in the toolbar. Scroll to the log storage policy sections at the bottom of the Edit Log Storage Policy pane.

  3. Configure the following settings, then click OK.

    Data Policy

     

     

    Keep Logs for Analytics

    Specify how long to keep Analytics logs.

     

    Keep Logs for Archive

    Specify how long to keep Archive logs.

    Make sure your setting meets your organization’s regulatory requirements.

    Disk Utilization

     

     

    Maximum Allowed

    Specify the amount of disk space allotted. See also Disk space allocation.

     

    Analytics : Archive

    Specify the disk space ratio between Analytics and Archive logs. Analytics logs require more space than Archive logs. Click the Modify checkbox to change the setting.

     

    Alert and Delete When Usage Reaches

    Specify the percentage of allotted disk space usage that will trigger an alert messages and start automatically deleting logs. The oldest Archive log files or Analytics database tables are deleted first.