Skip to main content
Johan_Smit
New Member
January 6, 2020
Question

FAZ - Log Cleanup

  • January 6, 2020
  • 2 replies
  • 3064 views

Hi Guys,

 

I've been assigned to look after one of our FortiAnalyzer Vm's.

I'm currently struggling to cleanup old archival logs per adom. (attached a screenshot).

 

Is there a command I can use to run a cleanup of my assigned thresholds or am I missing something basic?

Regards

J

    2 replies

    _aey_
    New Member
    January 8, 2020
    Hi,
    #execute log device logstore list This command lists the Device ID and the total size of logs for that device. #execute log device logstore clear <device_id> This command deletes all logs for that device.
    Johan_Smit
    New Member
    January 13, 2020

    Thank you for the response. However, the below is what I receive.

     

    FortiAnalyzer3 # execute log device logstore list       Device ID           logfiles           archive files      status ================================================================== (1) FAZ-VM0000000001        N/A        N/A    non-existing

    Even though I can see the ADOM's are showing 200/120 on archival logs.

     

    J

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!