FortiAnalyzer 6.2.1 is showing that my analytics usage for a particular ADOM is 70GB right now and goes back 14 days. From the GUI under Storage Info, I can see one device in the ADOM is using 52.1 GB.
What are some commands to get a further breakdown of the device's usage?
Based on the log graph on the FortiGate itself, it doesn't show it has sent that amount of data in the last 14 days, so I feel like the SQL database is reporting wrong information or has some old tables stuck in it from a previous firmware.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.