The log storage policy affects the logs and SQL database of the device associated with the log storage policy.
If you change log storage settings, the new date ranges affect Analytics and Archive logs currently in the FortiAnalyzer device. Depending on the date change, Analytics logs might be purged from the database, Archive logs might be added back to the database, and Archive logs outside the date range might be deleted.
- Go to System Settings > Storage Info.
- Double-click on an ADOM, right-click on an ADOM and then select Edit from the menu, or select the ADOM then click Edit in the toolbar. Scroll to the log storage policy sections at the bottom of the Edit Log Storage Policy pane.
- Configure the following settings, then click OK.
Keep Logs for Analytics
Specify how long to keep Analytics logs.
Keep Logs for Archive
Specify how long to keep Archive logs.
Make sure your setting meets your organization’s regulatory requirements.
Specify the amount of disk space allotted. See also Disk space allocation.
Analytics : Archive
Specify the disk space ratio between Analytics and Archive logs. Analytics logs require more space than Archive logs. Click the Modify checkbox to change the setting.
Alert and Delete When Usage Reaches
Specify the percentage of allotted disk space usage that will trigger an alert messages and start automatically deleting logs. The oldest Archive log files or Analytics database tables are deleted first.