FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
Article Id 197642
This article explains how to monitor the progress of an SQL Database rebuild. Rebuilding the SQL database can be a lengthy process if you have a large volume of raw logs.

Prior to FortiAnalyzer 5.2.1, the only direct method of determining the status of the rebuild is to use the following command:
diagnose sql status rebuild-db

The following is a sample output: The log SQL database rebuild has progressed to 6%.

Starting in FortiAnalyzer 5.2.1, the rebuild status is also displayed in the FortiAnalyzer dashboard.


Other indirect methods of observing the progress of the SQL database rebuild include:
  -  diagnose log device -- you will see the database value increase for devices & ADOMs
  -  Log View -- you will see more logs start to appear as the database is populated