Fortianalyzer Log Storage, Use these best practices to help you get the most out of your FortiAnalyzer products, maximize performance, and avoid potential problems. To view log storage information and to configure log storage policies, go to System Settings > Storage Info. Deploy Fortinet FortiAnalyzer on Azure to collect, correlate, and analyze geographically and chronologically diverse security data. Fetching logs from the Collector to the Analyzer Appendix A - Supported RFC Notes Appendix B - Log Integrity and Secure Log Transfer Maximum TLS/SSL version compatibility Appendix C - FortiAnalyzer Ansible Collection documentation Appendix D - FortiAI token entitlements for FortiAnalyzer Change Log Home FortiAnalyzer 7. Nov 15, 2017 ยท Description This article describes how to increase the disk space of FortiAnalyzer-VM and FortiManager-VM. 19 Change Log Overview This guide is a collection of best practices guidelines for using FortiAnalyzer. However, it is recommended to read the art Add managed device Replace the FortiAnalyzer device Decommissioning FortiAnalyzer Set up a log backup strategy Set up redundancy Create snapshots of FortiAnalyzer-VM Set disk size and RAID level Set log retention and storage Rebuild SQL database Resizing VM Data collection and setup Monitoring and dashboards Reporting and analysis Optimization We would like to show you a description here but the site won’t allow us. We would like to show you a description here but the site won’t allow us. If you change log storage settings, the new date ranges affect Analytics and Archive logs currently in the FortiAnalyzer device. 4 Administration Guide Configuring log storage policy The log storage policy affects the logs and SQL database of the device associated with the log storage policy. Log deletion When you reach your archive retention limit as defined by allocated storage size or specified days, FortiAnalyzer deletes old logs to make room for new logs. FortiAnalyzer can only delete files, not logs within a file. The log storage policy affects the logs and databases of the devices associated with the log storage policy. Conventional FortiAnalyzer In a conventional FortiAnalyzer, logs are stored in two different formats: Archive logs: offline logs used for log retention only Analytic logs: online logs indexed in SQL database and Log deletion When you reach your archive retention limit as defined by allocated storage size or specified days, FortiAnalyzer deletes old logs to make room for new logs. Logs will continue to populate this file until its limit is reached, at which time the file is "rolled" which involves compressing the file and creating a new one for further logs of that type. 4 Administration Guide log setting cloud Use this command to configure storing log messages to the FortiAnalyzer Cloud. Aggregate alerts and log information from Fortinet appliances and third-party devices in a single location, to get a simplified, consolidated view of your security posture. . Increasing disk space using the same disk or an extra disk will not impact log storage. Storage requirements Storage requirements: The total storage needed is directly related to the previously estimated LPS and to corporate policies on log retention and analysis. To view log storage information and to configure log storage policies, go to System Settings > Storage Info. If ADOMs are enabled, you can view and configure the data policies and disk usage for each ADOM. Archive logs When FortiAnalyzer receives a log, it is stored in a file. Log Management Set up a log backup strategy Set up redundancy Create snapshots of FortiAnalyzer-VM Snapshots for a FortiAnalyzer-VM HA cluster Set disk size and RAID level Set log retention and storage Determine the logs needed to meet business requirements Allocate quota and set log retention policy Use Fetcher Management for log fetching Rebuild SQL database Fetching logs from the Collector to the Analyzer Appendix A - Supported RFC Notes Appendix B - Log Integrity and Secure Log Transfer Maximum TLS/SSL version compatibility Appendix C - FortiAnalyzer Ansible Collection documentation Appendix D - FortiAI token entitlements for FortiAnalyzer Change Log Home FortiAnalyzer 7. The log storage policy affects only the logs and databases of the devices associated with the log storage policy. The procedure requires a reboot but logs are preserved. 6. 4 Administration Guide Add managed device Replace the FortiAnalyzer device Decommissioning FortiAnalyzer Set up a log backup strategy Set up redundancy Create snapshots of FortiAnalyzer-VM Set disk size and RAID level Set log retention and storage Rebuild SQL database Resizing VM Data collection and setup Monitoring and dashboards Reporting and analysis Optimization Deploy Fortinet FortiAnalyzer on Azure to collect, correlate, and analyze geographically and chronologically diverse security data. Reports are not affected. These files (rollled or otherwise) count against the archive retention limits and are referred to as Archived or Offline logs. lyano tiso re bymv zaca 0r no28qa kda f4n 9yof3
© Copyright 2026 St Mary's University