select *

Hi @psniech ,

I know I also used that SQL query before on the previous version of FortiAnalyzer.

I think they forgot to update the training document. 

Actually, I understand why removed this SQL query. Because when you ran that query, FortiAnalyzer was fetching all logs from the log database. This actually means that it puts a load on the device. They have brought this convenience so that this query does not have to be run continuously.