Skip to main content
cysaw
Staff & Editor
Staff & Editor
September 4, 2025

Technical Tip: How to effectively archive cross-search logs

  • September 4, 2025
  • 0 replies
  • 143 views
Description

This article describes how to effectively archive cross-search logs.

Scope FortiMail.
Solution
  1. From the navigation tree, go to Monitor -> Log -> History.


cysaw_0-1756880773751.png

 

  1. Select 'List'.


    cysaw_1-1756880773752.png

     

  2. Select 'Search' and configure as below:

     


cysaw_2-1756880773752.png

 

Time Range: Custom.
Start time: Make sure the time/date covers when the issue happened.
End time: Make sure the time/date covers when the issue happened.

Subject: Fill up this information for the issue.

From: Fill up this information for the issue.

To: Fill up this information for the issue.

 

cysaw_3-1756880773754.png

 

  1. Find the relevant cross-search log and select its Session ID.

cysaw_4-1756880773757.png

 

  1. Select 'Export' and 'Export All'.

    Snipaste_2025-09-04_16-10-29.png

     

  2. Below is an example of multiple cross-search logs that were exported.
                                                                                                            
     

    Snipaste_2025-09-04_15-59-13.png

     

  3. Put the exported Cross-search logs into a folder.

     

    Snipaste_2025-09-04_16-02-23.png                                                                   
  4. Use the application 7-Zip to archive the folder.
                                                                                    
    Snipaste_2025-09-04_16-06-37.png                                                                          
  5. Configure the following settings to archive the folder.
                                                                                       

    Snipaste_2025-09-04_16-07-34.png                                                                                     
  6. This is how the folder looks after the folder is archived.                                                                           

     
    Snipaste_2025-09-04_16-08-23.png

 

Note: To make the file encrypted with a password: Add a password under encryption, then enter it.