Check data policy and log storage policy
Check that the data policy and log storage policy are configured properly for each ADOM in each FortiAnalyzer unit. The data policy specifies how long to keep logs. The log storage policy affects logs and the SQL database. For details, see the FortiAnalyzer Administration Guide.