This is entirely dependent on the device you have, what you're logging
(All sessions vs UTM only - I recommend all, because inevitably someone
is going to ask for what XYZ123 is doing), and the amount of traffic
transiting the FortiGate. This is very...