bring archived log back to analytics

[Agent_1994]

I need to bring back (to analytics) an archived log, but only 60 days in the past.

How do i accomplish this? I heard about "execute sql-local rebuild-db", but that command does not have a date as a parameter.

Should i change the storage policy and then run that command?

Thanks in advance.

[chall_FTNT · Accepted solution]

Technical Note: FortiAnalyzer SQL database rebuild start-time

[Agent_1994]

Thanks, i'll try that.

PS: You may show me the "Google Is Your Friend" T-Shirt