I don't believe that this is currently possible as the logs do not come
from the FortiOS instances themselves, but from the FortiAnalyzer in the
Analytics PoP. The FAZ does not use the customer's FOS instances to
forward traffic so it therefore canno...
