zero trust fortinet to fortianalyzer

How do you guys handle the logging to fortianalyzer if you are in a zero trust environment? Do you log all traffic, do you log only security events, do you not log internal traffic but log external traffic? Also would logging security events only allow logging for DNS errors?