Sending logs to SOCaaS

Your FortiAnalyzer instance must be configured for SOCaaS. How and what you need to configure will depend on the deployment option you choose.

You are required to filter all confidential and personal data from all logs sent to SOCaaS. Fortinet is not responsible for any customer logs that contain confidential or personal data.

This section includes the following topics:

• Sending logs from an on-premise FortiAnalyzer

• Sending logs from FortiAnalyzer Cloud

• Sending logs from FortiSASE

• (FortiAnalyzer) Configuring log buffer cache size