File Management
FortiAnalyzer allows you to configure automatic deletion of device log files, quarantined files, reports, and content archive files after a set period of time.
Go to System Settings > Advanced > File Management to configure file management settings.
Configure the following settings, and then select Apply:
|
Device log files older than |
Select to enable automatic deletion of compressed log files. Enter a value in the text field, select the time period (Days, Weeks, or Months), and choose a time of day. |
|
Reports older than |
Select to enable automatic deletion of reports of data from compressed log files. Enter a value in the text field, select the time period, and choose a time of day. |
|
Content archive files older than |
Select to enable automatic deletion of IPS and DP archives from Archive logs. Enter a value in the text field, select the time period, and choose a time of day. |
|
Quarantined files older than |
Select to enable automatic deletion of compressed log files of quarantined files. Enter a value in the text field, select the time period, and choose a time of day. |
The time period you select determines how often the item is checked. If you select Months, then the item is checked once per month. If you select Weeks, then the item is checked once per week, and so on. For example, if you specify Device log files older than 3 Months, then on July 1, the logs for April, May, and June are kept and the logs for March and older are deleted.