Delete FSM logs

[Taher11]

Hello,

Which type of logs can we manually delete from the FSM CLI to gain storage?

Can we delete files or directories from this location? 

FortiSIEM 

[aebadi]

Hello,

This depends on how much data you want to retain .

Your events are stored in the following path but deleting them will remove all your recent events 

/data/eventdb/
Have you created a retention policy ? 

you can force purge events off your that :
https://help.fortinet.com/fsiem/6-7-0/Online-Help/HTML5_Help/Database_Settings_Retention.htm
https://community.fortinet.com/t5/FortiSIEM/Technical-Tip-How-Retention-Policies-work/ta-p/244058