Configuring log storage policy

The log storage policy affects the logs and databases of the devices associated with the log storage policy.

If you change log storage settings, the new date ranges affect Analytics and Archive logs currently in the FortiAnalyzer device. Depending on the date change, Analytics logs might be purged from the database, Archive logs might be added back to the database, and Archive logs outside the date range might be deleted.

To configure log storage settings:

1. Go to System Settings > ADOMs

2. Right-click or select an ADOM, and then select Edit. Alternatively, you can double-click the ADOM.

   The Edit ADOM pane displays. Go to the log storage policy sections at the bottom of the pane.

3. Configure the following settings, then click OK.

   Data Policy
   	Keep Logs for Analytics	Specify how long to keep Analytics logs. If set to 0, the Analytics logs will be kept for unlimited days.
   	Keep Logs for Archive	Specify how long to keep Archive logs. Make sure your setting meets your organization’s regulatory requirements. If set to 0, the Archive logs will be deleted after rolling. Note that the rolled log files will be kept until the next retention policy check, which occurs every twelve hours.
   Disk Utilization
   	Allocated	Specify the amount of disk space allotted. See also Disk space allocation.
   	Analytics: Archive	Specify the disk space ratio between Analytics and Archive logs. Analytics logs require more space than Archive logs. Select Modify to change the setting.
   	Alert and Delete When Usage Reaches	Specify the percentage of allotted disk space usage that will trigger an alert messages and start automatically deleting logs. The oldest Archive log files or Analytics database tables are deleted first.