This article describes how to effectively archive cross-search logs.
Scope
FortiMail.
Solution
From the navigation tree, go to Monitor -> Log -> History.
Select 'List'.
Select 'Search' and configure as below:
Time Range: Custom. Start time: Make sure the time/date covers when the issue happened. End time: Make sure the time/date covers when the issue happened.
Subject: Fill up this information for the issue.
From: Fill up this information for the issue.
To: Fill up this information for the issue.
Find the relevant cross-search log and select its Session ID.
Select 'Export' and 'Export All'.
Below is an example of multiple cross-search logs that were exported.
Put the exported Cross-search logs into a folder.
Use the application 7-Zip to archive the folder.
Configure the following settings to archive the folder.
This is how the folder looks after the folder is archived.
