Log Retention

[Xavier_Jackson]

Hi, 

I have a simple question. We have an issue with logs not saving after 7 days. We think it could be because of the storage. 

But I've seen the below from another forum: https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-set-log-retention-values-in-Fo...

On our dashboard it shows that the analyzer is set to 'automatically delete':

I'm a bit confused. Does this mean that it's automatically deleting logs unless we select one of the options? Or will it automatically delete IF I select one of those options? E.g. if I select the device log files older than [x days] will it delete those? or will it save those? Sorry if this is a stupid question haven't used Fortianalyzer much before. 

Thanks

[AEK]

Hello

Can you share the following screenshots:

• Storage Info > double-click on the ADOM
• All ADOMs > double-click on the ADOM

[jasonhong]

Since you did not enable automatic deletion of logs under File Management, most likely FAZ can only retain up to 7 days worth of logs due to the storage limitation.

You can check your current ADOM storage usage and capacity under System Settings > ADOMs.

https://docs.fortinet.com/document/fortianalyzer/7.4.2/administration-guide/769839/storage-informati...

[vraev]

Hi, 
The settings present in the screenshot has a precedence than the one in ADOM settings.

Best,