FAZ - Log Cleanup

[Johan_Smit]

Hi Guys,

I've been assigned to look after one of our FortiAnalyzer Vm's.

I'm currently struggling to cleanup old archival logs per adom. (attached a screenshot).

Is there a command I can use to run a cleanup of my assigned thresholds or am I missing something basic?

Regards

J

[_aey_]

Hi,

#execute log device logstore list This command lists the Device ID and the total size of logs for that device. #execute log device logstore clear <device_id> This command deletes all logs for that device.

[Johan_Smit]

Thank you for the response. However, the below is what I receive.

FortiAnalyzer3 # execute log device logstore list       Device ID           logfiles           archive files      status ================================================================== (1) FAZ-VM0000000001        N/A        N/A    non-existing

Even though I can see the ADOM's are showing 200/120 on archival logs.

J